Critical severityNVD Advisory· Published Jul 28, 2026· Updated Sep 9, 2026
CVE-2026-6881
CVE-2026-6881
Description
A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field.
This issue affects Advance Web: all versions; Legacy Advance: all versions.
Ellucian CRM Advance is not impacted.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: all versions
- Range: all versions
Patches
Vulnerability mechanics
References
1News mentions
1- ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and MoreThe Hacker News · Sep 7, 2026