CVE-2026-8734
HighSummary
A vulnerability was identified in Oinone Pamirs up to version 7.2.0 affecting the function RSQLToSQLNodeConnector.makeVariable of the queryListByWrapper interface. This manipulation leads to SQL injection, which can be initiated remotely.
Risk Assessment
This vulnerability poses a risk of remote attacks that could lead to unauthorized access to the database. The public disclosure of the exploit increases the likelihood of this vulnerability being exploited.
Recommendation
It is recommended to update Oinone Pamirs to the latest version to mitigate this vulnerability. Additionally, monitor systems for potential attack attempts exploiting this flaw.
Original NVD description (English source)
A vulnerability was determined in Oinone Pamirs up to 7.2.0. Affected by this issue is the function RSQLToSQLNodeConnector.makeVariable of the component queryListByWrapper Interface. This manipulation causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.