HIGH
Integratec
CVE published 2026-10-19
CVE-2026-13695
A SQL injection vulnerability exists in the Integratec application, specifically in the sInfo parameter sent via POST to the /login/ap_Login.aspx/start endpoint. This vulnerability allows an attacker to steal data from the database, cause errors, and potentially lead to follow-up attacks like data exfiltration or privilege escalation. The vulnerability has a high CVSS score of 8.8 and is classified as a U [truncated]