CVE-2026-3325 - SQL injection in MegaCMS by CRM Sistemas de Fidelización
CVE ID :CVE-2026-3325 Published : April 29, 2026, 8:37 a.m. | 48 minutes ago Description :SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The vulnerability arises from inadequate validation and sani
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] Critical Flaw Turns Vect Ransomware into Data Destroying Wiper
- [CYBER] CISA orders feds to patch Windows flaw exploited as zero-day
- [CYBER] CVE-2026-42167 Allows Auth Bypass And RCE In ProFTPD
- [CYBER] CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)
- [CYBER] Ransomware accidentally destroys all files larger than 128KB, preventing decryption — VECT code likely partly vibe coded with AI or used an old code base, security researchers suggest
- [CYBER] RIPE NCC RPKI exploit chain