Critical severityNVD Advisory· Published Jul 20, 2026· Updated Jul 22, 2026
CVE-2026-57309
CVE-2026-57309
Description
A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection.
Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other versions.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.