High
CVSS 8.1
Overview
SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute arbitrary code via the id parameter in Ajax.php
CVE-2025-26186
SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute...
Risk analysis
This vulnerability is rated 🟠 HIGH.
- CVSS: 8.1 (HIGH)
- Detected tags: rce, sql (tag impact: VERY HIGH)
Recommended actions:
- Patch/upgrade immediately (remote code execution).
- Reduce exposure (WAF/segmentation), minimize attack surface.
- Use parameterized queries/ORM (avoid string concatenation).
- Add WAF rules and input validation.