CVE-2026-1050
risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-89 CWE-74 |
| Vendor | risesoft-y9 |
| Product | digital-infrastructure |
| Published | Jan 17, 2026 |
| Last Updated | Feb 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for risesoft-y9 digital-infrastructure
Be the first to know when new high vulnerabilities affecting risesoft-y9 digital-infrastructure are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
risesoft-y9 / Digital-Infrastructure
9.6.0 9.6.1 9.6.2 9.6.3 9.6.4 9.6.5 9.6.6 9.6.7
References
vuldb.com: https://vuldb.com/?id.341603 vuldb.com: https://vuldb.com/?ctiid.341603 vuldb.com: https://vuldb.com/?submit.731010 github.com: https://github.com/risesoft-y9/Digital-Infrastructure/issues/2 github.com: https://github.com/risesoft-y9/Digital-Infrastructure/issues/2#issue-3777863959 github.com: https://github.com/risesoft-y9/Digital-Infrastructure/
Credits
🔍 ZAST.AI (VulDB User)