CVE-2026-76175 OCS Inventory NG CVE debrief

Who should care

System administrators, security teams, and developers responsible for the /ocsreports/?function=save_query_list endpoint and related systems should be aware of this vulnerability. Given the HIGH severity and potential for information extraction, priority should be given to remediation efforts, especially in environments where operator privileges are widespread or database security is a concern.

Technical summary

The CVE-2026-76175 vulnerability involves a SQL injection issue in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. An authenticated user with operator privileges can manipulate the SQL query, potentially leading to information extraction from the database. The vulnerability has a CVSS score of 8.6 and is classified as HIGH severity. This SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint requires immediate attention. Authenticated users with operator privileges can manipulate SQL queries, potentially leading to information extraction from the database. The CVE record indicates a SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input from authenticated users with operator privileges is incorporated into SQL queries without proper parameterization or validation.

Defensive priority

This SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint requires immediate attention. Authenticated users with operator privileges can manipulate SQL queries, potentially leading to information extraction from the database.

Recommended defensive actions

• Inventory and verify the /ocsreports/?function=save_query_list endpoint configuration
• Restrict operator privileges to minimize potential attack surfaces
• Implement additional monitoring for suspicious SQL query activity
• Review and enhance input validation and parameterization for SQL queries
• Apply vendor remediation or patches as available

Evidence notes

The CVE-2026-76175 record indicates a SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input from authenticated users with operator privileges is incorporated into SQL queries without proper parameterization or validation. However, detailed information about affected products, versions, and potential attack vectors is limited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.