CVE-2026-78837: SQL Injection
Published Sep 8, 2026
·Updated
A SQL injection vulnerability in the apform{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement.
Affected Software
1 affected component
AppNitro MachForm=v30
Event History
Sep 8, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:18 PM
Description
Frequently Asked Questions
1
Which input should be prioritized for validation and monitoring?
Prioritize the ap_form_{id} parameter. Crafted SQL supplied through this parameter can be used to access sensitive database information.