SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-57702

CRITICAL · CVSS 9.3 EPSS 0.28%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The vulnerability in Amelia booking software allows for Blind SQL Injection due to improper neutralization of special elements in SQL commands, potentially enabling attackers to access sensitive database information. Organizations using Amelia versions up to 2.4.2 should prioritize patching this critical vulnerability to mitigate the risk of unauthorized data exposure and system compromise.

CVE
CVE-2026-57702
Severity
CRITICAL
CVSS
9.3
EPSS
0.28%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Melograno Venture Studio Amelia ameliabooking allows Blind SQL Injection.This issue affects Amelia: from n/a through <= 2.4.2.