CVE-2026-108900

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 13, 2026

Last Seen

October 13, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-108900: SQL Injection Vulnerability in Exponent CMS57.1

A SQL injection vulnerability (CVE-2026-108900) has been identified in Exponent CMS versions up to 3.0.2patch2, specifically affecting the userLogin function in xmlrpc.php. This vulnerability allows unauthenticated remote attackers to manipulate SQL queries, potentially exposing or altering sensitiv...