CVE-2026-57787 is a Blind SQL Injection vulnerability in CreativeWS CWS SVGicons, caused by improper neutralization of special elements used in SQL commands. This flaw allows attackers with low privileges to execute unauthorized SQL queries remotely without user interaction, potentially compromising sensitive data confidentiality and causing limited disruption to availability. The vulnerability affects CWS SVGicons versions up to and including 1.5.5. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation can lead to unauthorized disclosure of sensitive information (confidentiality impact) and limited disruption of service (availability impact). Integrity impact is not indicated. The attack vector is network-based with low attack complexity and no required user interaction, increasing the risk of remote exploitation by low-privileged attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific mitigations or workarounds are provided at this time.