OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-66580

HIGH · CVSS 8.5 EPSS 0.36%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The Contributor SQL Injection vulnerability in Product Feed Manager versions up to 7.12.0 allows attackers to execute arbitrary SQL queries, potentially compromising the integrity and confidentiality of the database. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of data breaches and unauthorized access. Immediate action is recommended for any entity relying on this software for managing product feeds.

CVE
CVE-2026-66580
Severity
HIGH
CVSS
8.5
EPSS
0.36%

Original NVD Description

Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions.