CVE-2026-8402 is an SQL injection vulnerability in Eksagate's SYSGUARD 6001 product, specifically in version 2.0.2. The vulnerability arises from improper neutralization of special elements in SQL commands, enabling blind SQL injection attacks. The vendor confirmed the product is no longer supported, and no remediation or patch is available. The CVSS 3.1 score of 9.8 reflects the vulnerability's critical impact, including network attack vector, low attack complexity, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability allows an unauthenticated attacker to execute arbitrary SQL commands on the backend database, potentially leading to full disclosure, modification, or deletion of data, and disruption of service. Given the critical CVSS score and lack of vendor support, affected systems remain at high risk.

No official patch or remediation is available as the product is no longer supported by the vendor. Organizations should consider discontinuing use of SYSGUARD 6001 version 2.0.2 or any affected versions and migrate to a supported alternative. Additional mitigations may include network-level protections such as restricting access to the vulnerable system and employing web application firewalls with SQL injection detection capabilities, but these are not guaranteed to fully mitigate the risk.