CVE-2026-96346

Summary

This flaw allows an attacker to inject malicious SQL code, potentially leading to data theft or corruption in WP ERP versions 1.17.9 and earlier.

Exploitability

Exploitation requires access to the web interface and knowledge of the SQL injection vulnerability. Precondition is the target must be running an affected version of WP ERP.

Blast radius

If exploited, the attacker could gain full control over the database, leading to data loss or unauthorized data access.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to WP ERP 1.17.10 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.