CyberRota
← Ana sayfaya dön

CVE-2026-57309

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-20T13:16:56.367 · Çekilme zamanı: 2026-07-21T06:06:24.905241+00:00

CyberRota Yorumu

SQL Injection riski içeriyor. Uzaktan istismar edilebilir olabilir.

CVE
CVE-2026-57309
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok

Orijinal NVD Açıklaması

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other versions.