A SQL Injection vulnerability (CWE-89) exists in myCred up to version 4.0.2, allowing an attacker with low privileges to perform blind SQL injection attacks remotely without user interaction. This vulnerability can lead to high confidentiality impact and low availability impact. The vulnerability is identified as CVE-2026-125811 with a CVSS 3.1 score of 8.5.