CVE Catalog
CVE-2026-67854
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.40%
33th percentile - higher than 33% of all known CVEs
Summary
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code.
Risk Assessment
An attacker can take control of the application or database, potentially leading to data confidentiality and integrity breaches.
Recommendation
Immediately update Qcms to the latest version and implement input validation and prepared SQL statements.
Other vulnerabilities in Qcms
Original NVD description (English source)
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code
Vulnerability data from NVD (NIST) · CISA KEV · EPSS