CVE-2026-3200

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3200", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-02-25T14:04:07.653Z", "datePublished": "2026-02-25T20:02:08.548Z", "dateUpdated": "2026-02-27T17:57:56.330Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-25T20:02:08.548Z"}, "title": "z-9527 admin user.js getUsers sql injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-89", "lang": "en", "description": "SQL Injection"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-74", "lang": "en", "description": "Injection"}]}], "affected": [{"vendor": "z-9527", "product": "admin", "versions": [{"version": "1.0", "status": "affected"}, {"version": "2.0", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/getUser/getUsers of the file /server/controller/user.js. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-02-25T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-02-25T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-02-25T15:09:27.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "VulDB", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/?id.347772", "name": "VDB-347772 | z-9527 admin user.js getUsers sql injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.347772", "name": "VDB-347772 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.758325", "name": "Submit #758325 | z-9527 admin \u2264 commit 72aaf2d SQL Injection", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/?submit.758326", "name": "Submit #758326 | z-9527 admin \u2264 commit 72aaf2d SQL Injection (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/?submit.758327", "name": "Submit #758327 | z-9527 admin \u2264 commit 72aaf2d SQL Injection (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/?submit.758328", "name": "Submit #758328 | z-9527 admin \u2264 commit 72aaf2d SQL Injection (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/?submit.758330", "name": "Submit #758330 | z-9527 admin \u2264 commit 72aaf2d SQL Injection (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-1", "tags": ["related"]}, {"url": "https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-2", "tags": ["exploit"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-27T17:57:48.286819Z", "id": "CVE-2026-3200", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-27T17:57:56.330Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3200", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-27T17:57:48.286819Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-27T17:57:52.572Z"}}], "cna": {"title": "z-9527 admin user.js getUsers sql injection", "credits": [{"lang": "en", "type": "coordinator", "value": "VulDB"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"vendor": "z-9527", "product": "admin", "versions": [{"status": "affected", "version": "1.0"}, {"status": "affected", "version": "2.0"}]}], "timeline": [{"lang": "en", "time": "2026-02-25T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-02-25T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-02-25T15:09:27.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.347772", "name": "VDB-347772 | z-9527 admin user.js getUsers sql injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.347772", "name": "VDB-347772 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.758325", "name": "Submit #758325 | z-9527 admin \u2264 commit 72aaf2d SQL Injection", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/?submit.758326", "name": "Submit #758326 | z-9527 admin \u2264 commit 72aaf2d SQL Injection (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/?submit.758327", "name": "Submit #758327 | z-9527 admin \u2264 commit 72aaf2d SQL Injection (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/?submit.758328", "name": "Submit #758328 | z-9527 admin \u2264 commit 72aaf2d SQL Injection (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/?submit.758330", "name": "Submit #758330 | z-9527 admin \u2264 commit 72aaf2d SQL Injection (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-1", "tags": ["related"]}, {"url": "https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-2", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/getUser/getUsers of the file /server/controller/user.js. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "SQL Injection"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-25T20:02:08.548Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3200", "state": "PUBLISHED", "dateUpdated": "2026-02-27T17:57:56.330Z", "dateReserved": "2026-02-25T14:04:07.653Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-02-25T20:02:08.548Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "admin", "vendor": "z-9527", "versions": [{"status": "affected", "version": "1.0"}, {"status": "affected", "version": "2.0"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/getUser/getUsers of the file /server/controller/user.js. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Una vulnerabilidad fue identificada en z-9527 admin 1.0/2.0. El elemento afectado es la funci\u00f3n checkName/register/login/getUser/getUsers del archivo /server/controller/user.js. La manipulaci\u00f3n conduce a inyecci\u00f3n SQL. El ataque puede ser iniciado remotamente. El exploit est\u00e1 disponible p\u00fablicamente y podr\u00eda ser usado. El proveedor fue contactado tempranamente sobre esta divulgaci\u00f3n pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-3200", "lastModified": "2026-06-17T10:43:11.917", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3200", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-27T17:57:48.286819Z", "version": "2.0.3"}}]}, "published": "2026-02-25T21:16:45.337", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-1"}, {"source": "cna@vuldb.com", "url": "https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-2"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.347772"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.347772"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.758325"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.758326"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.758327"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.758328"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.758330"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-74"}, {"lang": "en", "value": "CWE-89"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.0"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "admin", "source": "cna", "vendor": "z-9527"}, "product": "admin", "vendor": "z-9527"}], "analysis": {"en": {"generated_at": "2026-04-18T17:40:22.699560+00:00", "value": {"mitigation_remediation": ["Identify all installations of z\u20119527 admin 1.0 or 2.0 within the environment.", "For each instance, check for available vendor fixes or contact the vendor for an official patch update. If no patch is provided, restrict access to the /server/controller/user.js endpoints by limiting exposure to trusted networks or enforcing strict authentication and application\u2011level firewalls.", "Implement defensive coding practices by updating the affected code to use parameterized queries or prepared statements for all database interactions in checkName, register, login, getUser, and getUsers.", "Monitor database activity logs for anomalous queries and investigate any suspicious events promptly."], "summary": {"action": "Assess Impact", "impact": "Data Compromise"}, "threat_synthesis": {"affected_systems": "The affected product is z\u20119527 admin version 1.0 and 2.0. The CVE data does not indicate a publicly available patch or update from the vendor, and vendor contact has not resulted in a response. The product is distributed via the public repositories linked in the advisory.", "description_and_impact": "A vulnerability in the /server/controller/user.js file of z\u20119527 admin 1.0 and 2.0 allows an attacker to inject arbitrary SQL through the checkName, register, login, getUser, and getUsers endpoints. This flaw enables the retrieval or alteration of database contents, potentially exposing sensitive user data or modifying critical application state. The weakness is identified as a classic injection flaw, documented under CWE\u201174 and CWE\u201189.", "risk_and_exploitability": "The vulnerability has a CVSS v3.1 score of 6.9, which denotes moderate severity. The EPSS score is below 1%, indicating a low but non\u2011zero likelihood of exploitation. It is not listed in the CISA Known Exploited Vulnerabilities catalog. Because the attack can be triggered remotely against exposed endpoints, any instance of the affected software exposed to the internet remains at risk for data compromise until mitigation measures are applied."}}}}, "created": "2026-02-26T13:14:48.436814+00:00", "updated": "2026-04-18T17:45:06.061090+00:00", "vendors": ["z-9527", "z-9527$PRODUCT$admin"]}