Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete p…

Published:

4 april 2026 om 22:00:00

Alert date:

5 april 2026 om 22:09:03

Source:

nvd.nist.gov

Web Technologies, Database & Storage

Kados R10 GreenBee contains a SQL injection vulnerability in the id_to_delete parameter that allows attackers to manipulate database queries. Attackers can craft malicious requests containing SQL statements to extract or modify sensitive database information. The vulnerability enables unauthorized access to backend databases through parameter injection. This represents a critical security flaw that could lead to data breaches and system compromise.

Technical details

Mitigation steps:

Affected products:

Kados R10 GreenBee