SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-57385

HIGH · CVSS 8.5 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The vulnerability in Vitepos versions up to 3.4.2 allows for Blind SQL Injection due to improper handling of special elements in SQL commands, potentially enabling attackers to manipulate database queries and extract sensitive information. Organizations using affected versions of Vitepos should prioritize remediation to mitigate the risk of data breaches and unauthorized access. Immediate action is essential for any entity relying on this software for transaction processing or data management.

CVE
CVE-2026-57385
Severity
HIGH
CVSS
8.5
EPSS
0.25%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through <= 3.4.2.