Loading market data...
← Back to CVE feed

CVE-2026-64877

HIGH CVSS 8.4 View on NVD ↗

Description

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References

Published: Jul 21, 2026 19:17 UTC Modified: Jul 21, 2026 20:17 UTC