CVE-2026-104389
8.5 HIGHPublished 2026-10-05 · Updated 2026-10-06
AI risk analysis
- Summary
- This vulnerability allows for Blind SQL Injection, enabling attackers to extract data from the database by manipulating SQL queries. It is significant because it can lead to data leakage and potential unauthorized access to sensitive information.
- Exploitability
- Exploitation requires access to the affected SQL command input, which can be challenging if proper input validation is in place. Precondition is the presence of user-controlled input in SQL queries.
- Blast radius
- If exploited, this could result in unauthorized data access and leakage of sensitive information stored in the database.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to Sirv version 8.2.6 or later.
sql-injectionblind-sqldata-leakage
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Weaknesses
CWE-89
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-102379
- HIGHCVE-2026-103066
- HIGHCVE-2026-103338
- CRITICALCVE-2026-103352
- CRITICALCVE-2026-103355
- HIGHCVE-2026-104460PoC
- HIGHCVE-2026-105076
- CRITICALCVE-2026-105889
Related by shared AI tags and CWE weakness class. Browse the full archive.