PT-2026-42742 · Ster · Ster

Michelin Cert · CVE-2026-25606 · Published 2026-05-22 · Updated 2026-05-22

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions STER versions prior to 9.5

Description Improper neutralization of user input within multiple Search Filters allows an authenticated attacker to perform SQL injection. This can lead to the unauthorized viewing of sensitive information, including data belonging to other users or any other data accessible by the application.

Recommendations Update to version 9.5.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-25606

Affected Products

Ster

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-25606 · Security Note
• https://t.me/cveNotify/164535 · Telegram Post
• https://t.me/cveNotify/164536 · Telegram Post
• https://cert.pl/posts/2026/05/CVE-2026-25606 · Note
• https://t.me/CVEtracker/54617 · Telegram Post
• https://t.me/cveNotify/164537 · Telegram Post
• https://ciop.pl/CIOPPortalWAR/appmanager/ciop/pl?_nfpb=true&_pageLabel=P52000165211572544981480 · Note