Skip to content

Standard Reader

Tag

Sql-injection

Articles and publications tagged Sql-injection across the Atmosphere.

2articles2publications

Articles

Publications

ioneyrezendeOct 24, 2026

Two SQL Injection Flaws in Zabbix, and Why the API Account Is the Real Perimeter

Two SQL injection flaws in one monitoring platform, one reachable with a non-administrative API account and one through a failed login. What the monitoring plane holds, and the configuration review that recovery does not cover.

zabbixcve-2024-42327

eiuspkz

eiuspkzOct 23, 2026

CVE-2026-114625: A Read-Only Login Is Enough to Own Arista VeloCloud Orchestrator

CVE-2026-114625 in Arista VeloCloud Orchestrator lets any authenticated user, including a read-only tenant account, escalate to superuser operator. CVSS 9.9, actively exploited.

vulnerabilitysd-wan

You've reached the end.