Beveiligingsadvies

CVE-2026-86123

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-05 09:59:11
Laatst bijgewerkt 2026-09-08 13:12:08
Toegewezen door VulnCheck
CVSS-score 9.4
Status PUBLISHED

Beschrijving

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server's network without authentication.