← back
CVE-2026-1517

iomad Company Admin Block sql injection

CVSS 5.1 MEDIUMEPSS 0.3%CWE-74CWE-89
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.1EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
05 Feb 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was identified in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block. Such manipulation leads to sql injection. The attack can be executed remotely. It is best practice to apply a patch to resolve this issue.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
n/a · iomad
References
https://github.com/iomad/iomad/https://github.com/iomad/iomad/issues/2559https://github.com/iomad/iomad/issues/2559#issuecomment-3841174677https://vuldb.com/?ctiid.344487https://vuldb.com/?id.344487