MetaGuru CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH MetaGuru CVE published 2026-07-15

CVE-2026-15804

A SQL Injection vulnerability exists in the HCM developed by MetaGuru. Authenticated remote attackers can inject SQL commands via specific parameters, compromising database data confidentiality, integrity, and availability. This vulnerability allows attackers to manipulate database queries, potentially leading to unauthorized data access, modification, or deletion. Defenders should assess exposure and imp [truncated]