/Vulnerability Library

YMC Filter - SQL Injection

CVE-2026-54836
Verified

Description

YMC Filter <= 3.11.5 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.

Severity

Critical

CVSS Score

9.3

Exploit Probability

1%

Published Date

July 20, 2026

Template Author

theamanrawat

CVE-2026-54836.yaml
9.3Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
CVE ID:
cve-2026-54836
CWE ID:
cwe-89

References

https://nvd.nist.gov/vuln/detail/CVE-2026-54836

Remediation Steps

Update to the latest version beyond 3.11.5.