This vulnerability (CVE-2026-65494) is an SQL Injection issue classified under CWE-89 in Dokan Pro, specifically affecting subscriber-related SQL commands. It impacts versions up to 5.0.2. The vulnerability allows an attacker with low privileges and no user interaction to perform network-based attacks that can compromise confidentiality by injecting malicious SQL code. The vendor has not yet provided an official fix or remediation level, and no patch links are available. The vulnerability is not related to a cloud service, so remediation depends on the vendor releasing an update.

Successful exploitation could lead to unauthorized disclosure of sensitive information from the database due to SQL Injection. The CVSS vector indicates high confidentiality impact, no integrity impact, and low availability impact. This means attackers could read sensitive data but not modify it or cause significant denial of service. The attack requires network access and low privileges but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently available, users should monitor vendor communications for updates. Until a patch is released, consider restricting network access to the affected application and applying any available web application firewall (WAF) rules that may help mitigate SQL Injection attempts specific to Dokan Pro subscriber functionality.