Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite… (CVE-2026-110895)

This vulnerability (CVE-2026-110895) in DevItems Support Genix support-genix-lite allows SQL Injection due to improper neutralization of special elements used in SQL commands. It affects all versions up to and including 1.4.54. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires low privileges, no user interaction, and impacts confidentiality highly, with limited availability impact and no integrity impact. No known exploits are reported in the wild, and no patch or fix links are currently available.

Successful exploitation can lead to unauthorized disclosure of sensitive data due to SQL Injection. The vulnerability does not impact data integrity but may cause limited denial of service. The high confidentiality impact means attackers can access protected information. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access privileges to the affected application and monitor for unusual database activity related to SQL injection attempts.