← All advisories

Unrated severityNVD Advisory· Published Jul 21, 2026· Updated Jul 22, 2026

CVE-2026-52470

CVE-2026-52470

Description

SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file

Affected products

1

Crocus/Crocusllm-create
Range: <1.3.44

Patches

Vulnerability mechanics

References

1

github.com/Y4y17/CVE/blob/main/Crocus/SQL%20Injection-2.mdmitre

News mentions

0

No linked articles in our index yet.