VYPR

SIREC

by Atmira

CVEs (1)

  • CVE-2026-123087HigNov 6, 2026
    risk 0.57cvss —epss —

    SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via…