CVE-2026-5964: Digiwin｜EasyFlow .NET - SQL Injection
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Digiwin EasyFlow .NETto a version that resolves this vulnerability.Fixed in 8.1.3 - Upgrade
Upgrade
Digiwin EasyFlow .NETto a version that resolves this vulnerability.Patch 2025/07/15
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5964?
CVE-2026-5964 has a high severity due to its potential for unauthorized access and data manipulation.
How do I fix CVE-2026-5964?
To fix CVE-2026-5964, update Digiwin EasyFlow .NET to the latest version provided by the vendor.
What types of attacks are possible with CVE-2026-5964?
CVE-2026-5964 allows attackers to perform SQL injection attacks, enabling them to read, modify, or delete database contents.
Who is affected by CVE-2026-5964?
Users of Digiwin EasyFlow .NET are affected by CVE-2026-5964 due to the SQL injection vulnerability.
Is authentication required to exploit CVE-2026-5964?
No, CVE-2026-5964 can be exploited by unauthenticated remote attackers.