CVE-2026-123087
SQL injection in Atmira’s SIREC
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causing the database to return unexpected information.
| CWE | CWE-89 |
| Vendor | atmira |
| Product | sirec |
| Published | Nov 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for atmira sirec
Be the first to know when new unknown vulnerabilities affecting atmira sirec are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Atmira / SIREC
0 < 16/10/2026
References
Credits
Luis Ovejero Martin