CVE-2026-2094CWE-89

Flowring|Docpedia - SQL Injection

High · published February 10, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

⚡ An authenticated attacker could turn your database into their own playground! This SQL Injection vulnerability in Docpedia makes it alarmingly easy to manipulate database contents. 🔥 Think of it like a sneaky diner who manages to convince the chef to change their order after it's already in the kitchen. Just a few crafted commands, and they can read, modify, or even delete any data they want, all without raising a flag! This vulnerability could lead to absolute chaos! Imagine an attacker reading sensitive user data, altering records, or even wiping your entire database clean. The fallout could be devastating for your organization, leading to data loss and erosion of trust.

Put simply

Think of it like a sneaky diner who manages to convince the chef to change their order after it's already in the kitchen. Just a few crafted commands, and they can read, modify, or even delete any data they want, all without raising a flag! The SQL Injection vulnerability in Docpedia allows authenticated remote attackers to inject arbitrary SQL commands, which can be executed on the database. This means they can exploit the input fields to manipulate the database directly, bypassing intended restrictions.

What to do

This vulnerability could lead to absolute chaos! Imagine an attacker reading sensitive user data, altering records, or even wiping your entire database clean. The fallout could be devastating for your organization, leading to data loss and erosion of trust. To secure your system, patch Docpedia to the latest version immediately. Additionally, ensure that all user inputs are sanitized and validated to prevent SQL injection attacks. Regularly audit your database queries to catch similar vulnerabilities in the future. You've got this! With a few strategic steps, you can lock down your database and protect your valuable data! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00371 · 29.8th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-02-10T06:47Z
EPSS history
Timeline
  • 10 FEB 06:47Z
    Flowring|Docpedia - SQL Injection
    cvelistv5