PT-2026-1099

CVE-2025-59387

Published

2026-01-02

Updated

2026-01-06

Description by

CVSS 4.0

8.1

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions MARS (Multi-Application Recovery Service) versions prior to 1.2.1.1686

Description An SQL injection issue affects MARS (Multi-Application Recovery Service). Successful exploitation could allow remote attackers to execute unauthorized code or commands. It is estimated that over 3.25 million instances are exposed. The vulnerability allows attackers to potentially execute unauthorized code or commands through SQL injection. The API endpoints and vulnerable parameters are not specified.

Recommendations Update MARS (Multi-Application Recovery Service) to version 1.2.1.1686 or later.

Exploitability

Fix

Impacts

Researchers

Greengrass

Q5Ca

Vendors

Affected products

Weakness enumeration

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers