← All advisories

Critical severity10.0NVD Advisory· Published Mar 20, 2025· Updated Jun 17, 2026

CVE-2025-26852

CVE-2025-26852

Description

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

DESCOR/INFOCAD3 versions
cpe:2.3:a:descor:infocad:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:descor:infocad:*:*:*:*:*:*:*:*range: <3.5.2.0
- (no CPE)range: <=3.5.1
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

2

www.infocadfm.com/changelog/sql-injection/nvdVendor Advisory
www.descor.com/prodotti/infocadnvdProduct

News mentions

0

No linked articles in our index yet.