Security Advisory

CVE-2025-66944

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-04 00:00:00
Last updated 2026-03-05 15:09:23
Assigner mitre
State PUBLISHED

Description

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint