CVE-2026-51821

CriticalCVSS 9.8

Published: 13/07/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.53%

41th percentile - higher than 41% of all known CVEs

Summary

SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /user/getUserLogin endpoint.

Risk Assessment

An attacker can take control of the system, access sensitive data, or disrupt video conferencing services.

Recommendation

Immediately update the system to the latest version and use parameterized SQL queries to eliminate the injection vulnerability.

Original NVD description (English source)

SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /user/getUserLogin endpoint