Skip to content
Construction Firms Targeted via mJobTime Vulnerability Using MSSQL & IIS Exploits

Construction Firms Targeted via mJobTime Vulnerability Using MSSQL & IIS Exploits

First seen 26 Jan 2026, 18:54 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

Construction companies are facing active attacks that exploit a critical SQL injection vulnerability in the Mjobtime application, a widely used labor time-tracking tool. The attacks utilize MSSQL and IIS POST request methods, targeting Mjobtime version 15.7.2. This vulnerability poses significant risks to the affected firms operating in the construction sector.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 183d ago How this analysis works

More articles in this cluster (2)