Is CVE-2026-63314 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-63314

Description

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.