SQL injection – InfoSecNexus

Critical vulnerability warning above a compromised server core

CVE-2026-114625: Arista VeloCloud Orchestrator SQL Injection Vulnerability

Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may...

23/10/2026 2 min read

Read briefing

Network defender inspecting a protected data connection

Critical CVEs Cyber Security

CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability

Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges...

15/09/2026 3 min read

Read briefing

Critical CVEs Cyber Security

CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability

Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request,...

03/09/2026 2 min read

Read briefing