CVE-2026-57752 is an SQL Injection vulnerability (CWE-89) in iNET Webkit version 1.2.4. The vulnerability arises from improper neutralization of special elements in SQL commands within the Contributor feature, enabling an attacker with network access and low privileges to execute crafted SQL commands. The CVSS 3.1 score is 8.5 (high), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. No patch or official remediation level has been published as of the data provided.

An attacker can exploit this vulnerability remotely with low privileges and no user interaction to execute SQL commands that compromise the confidentiality of the system's data. The integrity is not impacted, but availability may be slightly affected. This could lead to unauthorized data disclosure or partial service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, consider restricting network access to the affected service and applying compensating controls specific to SQL injection prevention if feasible.