CVE-2026-6887

Critical

Published: 23/04/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Borg SPM 2007, developed by BorG Technology Corporation, has a SQL Injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Risk Assessment

This vulnerability poses a serious risk to organizations as it allows attackers to access sensitive data and modify or delete it.

Recommendation

It is recommended to immediately cease the use of Borg SPM 2007 and implement security measures such as input validation and upgrading to newer software versions.

Original NVD description (English source)

Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.