Vulnerability Description
A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the application itself is able to access This issue was fixed in version 9.5.
Related Weaknesses (CWE)
References
- https://cert.pl/posts/2026/05/CVE-2026-25606
- https://www.ciop.pl/CIOPPortalWAR/appmanager/ciop/pl?_nfpb=true&_pageLabel=P5200
FAQ
What is CVE-2026-25606?
CVE-2026-25606 is a documented vulnerability. A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated a...
How severe is CVE-2026-25606?
CVSS scoring is not yet available for CVE-2026-25606. Check NVD for updates.
Is there a patch for CVE-2026-25606?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.