CVE-2026-8402 is a SQL injection vulnerability in Eksagate's SYSGUARD 6001 product. It arises from improper neutralization of special elements in SQL commands, enabling blind SQL injection attacks. The vulnerability affects SYSGUARD 6001 versions from 2.0.2 up to but not including 6.1.16.0. The vendor has confirmed the product is no longer supported, and no remediation level or patch is provided. The CVSS 3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to unauthorized disclosure, modification, or deletion of data within the affected SYSGUARD 6001 system. Given the critical CVSS score, attackers can remotely execute blind SQL injection attacks without authentication, potentially compromising the entire database and system integrity.

No official patch or remediation is available as the product is no longer supported by the vendor. Organizations using affected versions should consider discontinuing use of SYSGUARD 6001 or implementing compensating controls such as network segmentation and strict access controls to limit exposure. Monitoring and incident response plans should be prepared in case of exploitation attempts.