SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-57787

HIGH · CVSS 8.5 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

A SQL Injection vulnerability exists in CreativeWS CWS SVGicons versions up to 1.5.5, allowing attackers to execute blind SQL queries due to improper neutralization of special elements in SQL commands. This can lead to unauthorized data access or manipulation, posing a significant risk to any systems utilizing the affected software. Organizations using CWS SVGicons should prioritize remediation to mitigate potential data breaches and ensure database integrity.

CVE
CVE-2026-57787
Severity
HIGH
CVSS
8.5
EPSS
0.25%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeWS CWS SVGicons cws-svgicons allows Blind SQL Injection.This issue affects CWS SVGicons: from n/a through <= 1.5.5.