Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-10266

NewType Infortech|NUP Portal - SQL Injection

Description

NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NewType Infortech NUP Portal

Default version status: unaffected

  • 0 to ≤ SP5.0affected

References