CVE-2025-41007CWE-89

SQL Injection in Cuantis

Critical · published March 23, 2026

CVSS v4.0
9.3
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

SQL Injection in Cuantis. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'search' parameter in the '/search.php' endpoint.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00292 · 20.4th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-03-23T12:08Z
EPSS history
Timeline
  • 23 MAR 12:08Z
    SQL Injection in Cuantis
    cvelistv5