Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-15804

MetaGuru｜HCM - SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MetaGuru HCM

Default version status: unaffected

  • 7 to < 7.5.3affected
  • 8 to < 8.1.7.1affected

References