Is CVE-2026-89310 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-89310?

CVE-2026-89310 has a CVSS v3 severity of CRITICAL (9.9).

Back

CVE-2026-89310

Description

A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account.