CVE-2026-6887
CriticalSummary
Borg SPM 2007, developed by BorG Technology Corporation, has a SQL Injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows attackers to access sensitive data and modify or delete it.
Recommendation
It is recommended to immediately cease the use of Borg SPM 2007 and implement security measures such as input validation and upgrading to newer software versions.
Other vulnerabilities in Borg SPM 2007
See all- CVE-2026-6886Critical
Borg SPM 2007, developed by BorG Technology Corporation, has an authentication bypass vulnerability that allows unauthenticated remote attackers to log into the system as any user.
- CVE-2026-6885Critical
Borg SPM 2007, developed by BorG Technology Corporation, has an arbitrary file upload vulnerability, allowing unauthenticated remote attackers to upload and execute malicious scripts on the server.
Original NVD description (English source)
Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS