PT-2025-53297 · Mynet · Mynet

Published 2025-12-24 · Updated 2026-01-08 · CVE-2024-39037

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MyNET versions up to 26.08.316

Description The software contains an unauthenticated SQL Injection issue through the intmenu parameter. This allows for potential unauthorized access to the database.

Recommendations Update MyNET to a version later than 26.08.316.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-39037

Affected Products

Mynet

References · 9

• 🔥 https://miguelsantareno.github.io/airc_exploit.txt · Exploit
• https://osv.dev/vulnerability/CVE-2024-39037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39037 · Security Note
• https://t.me/CVEtracker/40610 · Telegram Post
• https://airc.pt/solucoes-servicos/solucoes?segment=MYN · Note
• https://twitter.com/VulmonFeeds/status/2003928432040644863 · Twitter Post
• https://twitter.com/CVEnew/status/2004868181907943542 · Twitter Post
• https://t.me/cveNotify/148137 · Telegram Post
• https://t.me/cveNotify/146805 · Telegram Post