CVE-2026-8402

Name of the Vulnerable Software and Affected Versions SYSGUARD 6001 versions 2.0.2 through 6.1.15.0

Description An issue exists in the web interface of the management interface where improper neutralization of special elements used in SQL commands allows for Blind SQL Injection. This occurs due to insufficient input validation or parameterization in backend database queries. An attacker with network access to the exposed interface can send crafted requests to infer database content, which may lead to unauthorized database access, credential theft, configuration tampering, and full system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.