High severityNVD Advisory· Published Aug 19, 2026· Updated Aug 19, 2026

CVE-2025-14603

Description

The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents or causing the application to become unresponsive. Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and on have the patch.

Affected products

VsDesk/vsDeskllm-fuzzy
Range: >=14.0101

Patches

Vulnerability mechanics

References

github.com/klsecservices/Advisories/blob/master/KLSA-00295-Blind-SQLi-via-User-Input-in-vsDesk.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000