PT-2026-6550 · Iomad · Iomad

Vaibhav Gupta · Publicado 2026-02-05 · Atualizado 2026-02-05 · CVE-2026-1517

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions iomad versions prior to 4.5 LTS iomad versions prior to 5.0

Description A flaw exists in iomad that allows for remote execution of SQL injection attacks. The issue resides within an unknown function of the Company Admin Block component. Successful exploitation could allow an attacker to manipulate data.

Recommendations Upgrade to version 4.5 LTS. Upgrade to version 5.0.

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-1517

Produtos afetados

Iomad

Referências · 10

• https://github.com/iomad/iomad/issues/2559 · Nota
• https://github.com/iomad/iomad/issues/2559#issuecomment-3841174677 · Correção
• https://osv.dev/vulnerability/CVE-2026-1517 · Aviso do Fabricante
• https://vuldb.com/?id.344487 · Nota
• https://t.me/CVEtracker/43813 · Publicação no Telegram
• https://vuldb.com/?ctiid.344487 · Nota
• https://github.com/iomad/iomad · Nota
• https://twitter.com/CVEnew/status/2019392390637686801 · Publicação no Twitter
• https://t.me/cveNotify/150969 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-1517 · Nota de Segurança