ZDI-26-286: DriveLock SQL Injection Privilege Escalation Vulnerability
Source Zero Day Initiative
Not known to be exploited.
Data as of 30 Oct 2026, 11:52 UTC
Rated High by Threat Radar from the Zero Day Initiative text · No CVSS score from NVD or the CNA
- EPSS
- 0.7% chance of exploitation in 30 days – higher than 53% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
Public on cve.org; its publication date is not in this record
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
AI-suggested
DriveLock has issued an official update that addresses this SQL injection vulnerability. Users should apply the vendor-provided update promptly to remediate the issue. Since authentication is required for exploitation, ensure that access controls and authentication mechanisms are properly enforced as an additional layer of defense.
Description
A SQL injection vulnerability in DriveLock's web service allows authenticated remote attackers to escalate privileges. The flaw is due to improper validation of user-supplied input used in SQL queries on the service listening on TCP port 4568. DriveLock has issued an update to fix this issue. Exploitation requires authentication but can lead to full compromise of protected resources.