CVE-2026-18765: SQL Injection in Teracity Sotware's Teracity E-OSB Platform
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection.
This issue affects E-OSB: before V02.26.07.08.01.
Affected Software
Event History
Frequently Asked Questions
Which E-OSB versions are affected?
The issue affects Teracity Software Technologies Inc. E-OSB versions before V02.26.07.08.01. Systems running that version or a later version are not identified as affected by the supplied information.
Can this vulnerability be exploited remotely without authentication or user interaction?
The supplied CVSS vector indicates network access, low attack complexity, no privileges required, and no user interaction required. This indicates an unauthenticated remote attacker may be able to exploit the SQL injection vulnerability.
What is the potential impact of successful exploitation?
The CVSS vector rates confidentiality, integrity, and availability impact as high. Successful exploitation could therefore affect data confidentiality and modification, as well as service availability.