This vulnerability in Golemiq 0 Day Analytics (<= 4.0.0) allows SQL Injection due to improper neutralization of special elements in SQL commands. The CVSS 3.1 score is 7.6 (high), with network attack vector, low attack complexity, required high privileges, no user interaction, and a scope change. The impact affects confidentiality (high) and availability (low), but not integrity. No patch or vendor advisory is currently provided, and the product is not a cloud service.

Successful exploitation could allow an attacker with high privileges to execute unauthorized SQL commands, potentially leading to disclosure of sensitive data (high confidentiality impact) and partial denial of service (low availability impact). Integrity is not impacted according to the CVSS vector. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected application to trusted users with necessary privileges only, and monitor for suspicious activity related to SQL queries. Avoid exposing the application to untrusted networks where possible.