CVE-2026-77098

CriticalCVSS 9.8

Published: 08/09/2026(UTC)Updated: 11/09/2026(UTC)Translated: 08/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile - higher than 13% of all known CVEs

Summary

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers should upgrade to the resolved maintenance release. Update Private Metrics Server.

Risk Assessment

SQL injection may allow an attacker to manipulate the database, steal data, or compromise data integrity, potentially leading to serious security breaches.

Recommendation

It is recommended to immediately update Private Metrics Server to the latest resolved maintenance release.

Other vulnerabilities in Private Metrics Server

CVE-2026-77097High
Private Metrics Server has a missing authentication condition affecting metrics upload functionality and service availability. Software customers should upgrade to the resolved maintenance release.

Original NVD description (English source)

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.