CVE-2026-1050: risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection
A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1050?
CVE-2026-1050 has been classified with a high severity due to its potential for SQL injection attacks.
How do I fix CVE-2026-1050?
To fix CVE-2026-1050, upgrade Risesoft Digital-Infrastructure to version 9.6.8 or later where the vulnerability has been addressed.
What kind of vulnerability is CVE-2026-1050?
CVE-2026-1050 is an SQL injection vulnerability found in the REST Authenticate Endpoint in Y9PlatformUtil.java.
Which versions of Risesoft Digital-Infrastructure are affected by CVE-2026-1050?
CVE-2026-1050 affects all versions of Risesoft Digital-Infrastructure up to and including 9.6.7.
What impact can CVE-2026-1050 have on my system?
Exploiting CVE-2026-1050 could allow attackers to manipulate and execute unauthorized SQL commands, potentially compromising database integrity.