CVE-2026-82307
9.8 CRITICALPublished 2026-09-30 · Updated 2026-09-30
AI risk analysis
- Summary
- A SQL injection vulnerability exists in SOPLOG versions before 2026.9.4.1, allowing attackers to execute arbitrary SQL commands and potentially gain full database access.
- Exploitability
- Exploitation is relatively straightforward given the SQL injection vulnerability, requiring only crafting a malicious input to manipulate the SQL command.
- Blast radius
- If exploited, this vulnerability could result in data theft, corruption, or complete compromise of the database, impacting all users and services relying on the affected system.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to SOPLOG 2026.9.4.1 or later.
sql-injectiondatabaserceweb
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100683PoC
- HIGHCVE-2026-25434
- HIGHCVE-2026-70370
- HIGHCVE-2026-70371
- HIGHCVE-2026-70373
- CRITICALCVE-2026-79536
- CRITICALCVE-2026-79798
- HIGHCVE-2026-82039PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.