CVE-2026-77098: Private Metrics Server SQL Injection
Published Sep 8, 2026
·Updated
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.
Affected Software
1 affected component
Private Metrics Server
Event History
Sep 8, 2026
CVE Published
via MITRE·12:12 PM
Data Sourced
via MITRE·12:12 PM
DescriptionWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the recommended remediation?
Upgrade Private Metrics Server to the resolved maintenance release.
2
Can affected deployments be identified by version or configuration from the available advisory data?
No. The provided data does not specify affected versions, fixed version numbers, or configuration conditions.
3
Does the available information describe temporary mitigations if an upgrade cannot be applied immediately?
No temporary workaround or compensating control is provided in the available data.