Threats Tagged 'cve-2026-2236'
View all threats tagged with 'cve-2026-2236'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-2236'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-2236 is a high-severity SQL Injection vulnerability in the HGiga C&Cm@il package olln-base that allows unauthenticated remote attackers to inject arbitrary SQL commands. This flaw enables attackers to read sensitive database contents without any authentication or user interaction. The vulnerability arises from improper neutralization of special elements in SQL commands (CWE-89). Although no known exploits are currently reported in the wild, the ease of exploitation and potential data exposure make this a critical risk. European organizations using this software risk data breaches, loss of confidentiality, and potential further compromise. Mitigation requires immediate code review, input validation, and deployment of patches once available. Countries with significant HGiga product usage and critical infrastructure reliance on this software are at highest risk. Given the high CVSS score of 8.7, organizations should prioritize remediation to prevent exploitation. Join the discussion | CVE Database V5 | 02/09/2026, 07:20:21 UTC Added: 02/09/2026, 07:46:15 UTC |
Showing 1 to 1 of 1 result