CVE-2026-2093: Flowring｜Docpedia - SQL Injection

Published Feb 10, 2026

Updated

Docpedia developed by Flowring has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

Affected Software

1 affected component

Flowring Docpedia

Remediation

Information

Please install the patch DP4 HotFix_057.

Event History

Feb 10, 2026

CVE Published

via MITRE·06:45 AM

Data Sourced

via MITRE·06:45 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-2093?

The severity of CVE-2026-2093 is rated as high due to its potential for unauthorized access to sensitive database information.

How do I fix CVE-2026-2093?

To fix CVE-2026-2093, it is recommended to sanitize user inputs and implement prepared statements in your SQL queries.

Who is affected by CVE-2026-2093?

CVE-2026-2093 affects users of the Flowring Docpedia application that do not have proper input validation mechanisms.

What is an SQL Injection vulnerability in CVE-2026-2093?

An SQL Injection vulnerability in CVE-2026-2093 allows attackers to execute arbitrary SQL statements, potentially compromising the database.

Can CVE-2026-2093 lead to data breaches?

Yes, CVE-2026-2093 can lead to data breaches, as attackers may gain unauthorized access to sensitive database information.