CVE-2026-67854

Qcms version 6.0.6 is vulnerable to an SQL Injection flaw that enables remote attackers to execute arbitrary code on the affected system. Organizations using this version of Qcms should prioritize remediation efforts to mitigate potential unauthorized access and control over their databases. Immediate action is recommended for those managing sensitive data or critical applications reliant on this software.