PatchSiren

Atmira CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Atmira CVE published 2026-11-06

CVE-2026-123087

A SQL injection vulnerability exists in Atmira's SIREC due to improper sanitization of user-supplied input from a JSON object. This allows malicious input to alter the original SQL query, potentially leading to unauthorized database information disclosure. The vulnerability has a CVSS score of 8.7 and is classified as HIGH severity. Defenders should assess exposure and prioritize verification of this vuln [truncated]