CVE-2026-96604

HIGH 7.3

SoftNews Media Group DataLife Engine Search search.php strip_data sql injection

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the file engine/modules/search.php of the component Search Module. The manipulation of the argument story leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-89 CWE-74
Vendor	softnews media group
Product	datalife engine
Published	Sep 23, 2026

Stay Ahead of the Next One

Get instant alerts for softnews media group datalife engine

Be the first to know when new high vulnerabilities affecting softnews media group datalife engine are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

SoftNews Media Group / DataLife Engine

18.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/408972 vuldb.com: https://vuldb.com/vuln/408972/cti vuldb.com: https://vuldb.com/cve/CVE-2026-96604 vuldb.com: https://vuldb.com/submit/899134 pastebin.com: https://pastebin.com/nkMeTizS

Credits

🔍 elman99 (VulDB User) VulDB CNA Team