PT-2026-6550 · Iomad · Iomad

Vaibhav Gupta · Published 2026-02-05 · Updated 2026-02-05 · CVE-2026-1517

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions iomad versions prior to 4.5 LTS iomad versions prior to 5.0

Description A flaw exists in iomad that allows for remote execution of SQL injection attacks. The issue resides within an unknown function of the Company Admin Block component. Successful exploitation could allow an attacker to manipulate data.

Recommendations Upgrade to version 4.5 LTS. Upgrade to version 5.0.

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-1517

Affected Products

Iomad

References · 10

• https://github.com/iomad/iomad/issues/2559#issuecomment-3841174677 · Patch
• https://osv.dev/vulnerability/CVE-2026-1517 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1517 · Security Note
• https://github.com/iomad/iomad/issues/2559 · Note
• https://vuldb.com/?id.344487 · Note
• https://t.me/CVEtracker/43813 · Telegram Post
• https://vuldb.com/?ctiid.344487 · Note
• https://github.com/iomad/iomad · Note
• https://twitter.com/CVEnew/status/2019392390637686801 · Twitter Post
• https://t.me/cveNotify/150969 · Telegram Post