PT-2026-84974
CVE-2026-76175
·
Published
2026-09-03
·
Updated
2026-09-04
Description by
CVSS 4.0
8.6
HighMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
The product name cannot be determined (affected versions not specified)
Description
An authenticated user with operator privileges can manipulate SQL queries to extract information from the database. This occurs because input provided to the
del check parameter at the '/ocsreports/?function=save query list' endpoint is incorporated into a query without proper parameterization or validation.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾