CVE-2026-75334 | smart-web2 up to 1.3.1 Report ReportController.save sqlResource.sql sql injection

August 26, 2026 Yanac

A vulnerability classified as critical has been found in smart-web2 up to 1.3.1. Impacted is the function ReportController.save of the component Report Module. Performing a manipulation of the argument sqlResource.sql results in sql injection.

This vulnerability is identified as CVE-2026-75334. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More