CVE-2025-10266: NewType Infortech｜NUP Portal - SQL Injection
NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10266?
CVE-2025-10266 has a critical severity level due to its ability to allow unauthenticated remote attackers to perform SQL injection.
How do I fix CVE-2025-10266?
To fix CVE-2025-10266, update the NewType Infortech NUP Pro software to the latest version that addresses the SQL injection vulnerability.
Who is affected by CVE-2025-10266?
CVE-2025-10266 affects users of NewType Infortech NUP Pro software that has not been patched against this vulnerability.
What kind of attack is CVE-2025-10266 associated with?
CVE-2025-10266 is associated with SQL injection attacks, which can be used to manipulate database content.
What can attackers do using CVE-2025-10266?
Using CVE-2025-10266, attackers can read, modify, or delete database contents without authentication.