CVE-2026-86595
8.8 HIGHPublished 2026-09-28 · Updated 2026-09-28
AI risk analysis
- Summary
- This vulnerability allows SQL injection, enabling an attacker to execute arbitrary SQL commands, potentially leading to data theft or system compromise.
- Exploitability
- Exploitation is relatively straightforward given the SQL injection flaw, requiring an attacker to craft a malicious input to manipulate the SQL query.
- Blast radius
- If exploited, this could result in unauthorized access to sensitive data or complete system compromise, impacting data integrity and confidentiality.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to enVision version 260655 or later.
sql-injectiondata-theftsystem-compromise
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection. This issue affects enVision: before 260655.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-14913
- HIGHCVE-2022-4997
- CRITICALCVE-2023-54399
- CRITICALCVE-2023-54400PoC
- CRITICALCVE-2025-63564
- MEDIUMCVE-2026-11421
- CRITICALCVE-2026-12718
- MEDIUMCVE-2026-14872
Related by shared AI tags and CWE weakness class. Browse the full archive.