Skip to content
SQL Injection Vulnerability Discovered in Atmira’s SIREC

SQL Injection Vulnerability Discovered in Atmira’s SIREC

First seen 6 Nov 2026, 21:47 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 6, 2026 at 21:47 UTC
  • •CVE-2026-123087 is a SQL injection vulnerability in Atmira’s SIREC.
  • •The vulnerability allows manipulation of SQL queries via unsanitized user input.
  • •Atmira confirmed the vulnerability was fixed on October 16, 2026.

A SQL injection vulnerability, identified as CVE-2026-123087, has been disclosed in Atmira’s SIREC. This flaw allows attackers to manipulate SQL queries by injecting malicious input into user-supplied JSON data. The vulnerability affects systems that utilize Atmira’s SIREC and has a CVSS score of 4.0, indicating a low to medium severity. Atmira confirmed that the vulnerability was patched on October 16, 2026, prior to its public disclosure on November 6, 2026. The vulnerability could potentially lead to unauthorized access to sensitive database information. Security professionals are advised to ensure that the patch is applied to mitigate risks associated with this vulnerability.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 18h ago How this analysis works

Timeline

2026-10-16
Vulnerability patched
Atmira confirmed the fix for CVE-2026-123087 was released.
cve.report
2026-11-06
Vulnerability disclosed
CVE-2026-123087 was publicly disclosed, detailing the SQL injection flaw.
www.incibe.es
2026-11-06
CVE-2026-123087 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (2)

Following this threat?

Track Atmira and CVE-2026-123087 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3

Common questions

What is CVE-2026-123087?
CVE-2026-123087 is a SQL injection vulnerability in Atmira’s SIREC that allows unauthorized SQL query manipulation.
Is there a patch available?
Yes, Atmira released a patch for this vulnerability on October 16, 2026.
What should I do if I use Atmira’s SIREC?
Ensure that the patch released on October 16, 2026, is applied to your systems to mitigate the vulnerability.