CVE-2026-8402CWE-89

SQLi in Exagate's SYSGUARD 6001

Critical · published June 30, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Eksagate Electronic Engineering and Computer Industry Trade Inc. SYSGUARD 6001 allows Blind SQL Injection.

This issue affects SYSGUARD 6001: from 2.0.2 before 6.1.16.0.

NOTE: The vendor was contacted and it was learned that the product is not supported.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-06-30T11:36Z
EPSS history
Timeline
  • 30 JUN 11:36Z
    SQLi in Exagate's SYSGUARD 6001
    cvelistv5