CyberRota
Back to database

CVE-2026-7727

HIGH · CVSS 7.3 EPSS 0.04%

Source: NVD + CISA KEV + EPSS · Published: 2026-05-04 · Last synced: 2026-06-03

CyberRota Analysis

SQL Injection riski içeriyor. Uzaktan istismar edilebilir olabilir.

CVE
CVE-2026-7727
Severity
HIGH
CVSS
7.3
EPSS
0.04%

Original NVD Description

A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9. This affects the function GetQueryMachineGridOnePageData of the file /Base/BaseService.asmx/DataService. This manipulation of the argument SortOrder causes sql injection. The attack can be initiated remotely. Upgrading to version 8.3.10 is able to mitigate this issue. You should upgrade the affected component.