CVE-2026-80236
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Efence by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents.
Risk Assessment
An unauthenticated attacker can read sensitive data from the database, potentially leading to confidentiality and integrity breaches.
Recommendation
Immediately apply patches provided by the vendor and restrict access to file upload functionality.
Other vulnerabilities in EFence
See all- CVE-2026-80235Critical
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
- CVE-2026-80237High
EFence by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, enabling arbitrary code execution on the server.
Original NVD description (English source)
Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents.