CVE-2026-111634: helicalinsight 0 through 7.0.0

Affected technology

helicalinsight · 0 through 7.0.0
helicalinsight

Description’s affected range: through 7.0.0

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Attackers can supply crafted Numeric or String placeholder values that bypass the broken SqlDetect guard to read unexposed tables and modify data in the report's data source. Vendor/CNA’s CVSS 4.0 assessment (base score 8.6/10) rates confidentiality and integrity impact as high; availability impact as none.

Published 16-Oct-2026 19:03 UTC

CWE: CWE-89
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 19:24:35.956875+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-111634.html