Skip to content

CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-67854

SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-08-17
Updated: 2026-08-18
Assigning organization: mitre

Description

SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://jiuzero.github.io/2026/07/04/QCMS-tableField-Action-Backend-SQL-Injection-Vulnerability-White-box-Audit-Report?PASSWORD=cve520cve ↗