Critical severity10.0NVD Advisory· Published Jan 12, 2026· Updated Jun 17, 2026

CVE-2025-52694

Description

Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Advantech/Iot Edge Linux Docker
cpe:2.3:a:advantech:iot_edge_linux_docker:*:*:*:*:*:*:*:*
Range: <2.0.2
Advantech/Iot Edge Windows
cpe:2.3:a:advantech:iot_edge_windows:*:*:*:*:*:*:*:*
Range: <2.0.2
Advantech/Iotsuite Growth Linux Docker
cpe:2.3:a:advantech:iotsuite_growth_linux_docker:*:*:*:*:*:*:*:*
Range: <2.0.2
Advantech/Iotsuite SaaS Composer
cpe:2.3:a:advantech:iotsuite_saas_composer:*:*:*:*:*:*:*:*
Range: <3.4.15
Advantech/Iotsuite Starter Linux Docker
cpe:2.3:a:advantech:iotsuite_starter_linux_docker:*:*:*:*:*:*:*:*
Range: <2.0.2
Advantech/IoTSuite and IoT Edge Productsv5
Range: SaaSComposer prior to version V3.4.15

Patches

Vulnerability mechanics

References

www.csa.gov.sg/alerts-and-advisories/alerts/alerts-al-2026-001/nvdMitigationThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.032
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000