CVE-2026-123087

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

November 6, 2026

Last Seen

November 6, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

SQL Injection Vulnerability in Atmira's SIREC (CVE-2026-123087)66.0

A SQL injection vulnerability, identified as CVE-2026-123087, has been discovered in Atmira's SIREC system. This flaw arises from improper handling of user-supplied data, allowing unauthenticated attackers to manipulate SQL queries and potentially access sensitive information. The vulnerability has...

SQL Injection Vulnerability Discovered in Atmira’s SIREC45.0

A SQL injection vulnerability, identified as CVE-2026-123087, has been disclosed in Atmira’s SIREC. This flaw allows attackers to manipulate SQL queries by injecting malicious input into user-supplied JSON data. The vulnerability affects systems that utilize Atmira’s SIREC and has a CVSS score of 4....

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (2)

SQL Injection Vulnerability in Atmira's SIREC (CVE-2026-123087)

18h ago·1 sources

SQL Injection Vulnerability Discovered in Atmira’s SIREC

18h ago·0 sources

Related Articles (4)

CVE-2026-123087 CVE Vulnerability Disclosures / 11h SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causing the database to return unexpected information.

cve.report·18h ago

SQL injection in Atmira’s SIREC High & Critical Vulnerabilities / 10h Atmira - Sirec - HIGH - CVE-2026-123087. SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causing the database to return unexpected information.

securityvulnerability.io·18h ago

CVE-2026-123087 INCIBE-CERT - Vulnerabilities RSS / 7h The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causing the database to return unexpected information.

www.incibe.es·18h ago

CVE-2026-123087 - Exploits & Severity

Related Entities

Sql Injection Atmira CWE-89 - SQL Injection Sirec