CVE-2026-12062

{
  "etk_id": "ETK-2026-4150",
  "cve_id": "CVE-2026-12062",
  "display_id": "CVE-2026-12062",
  "ghsa_id": "GHSA-847v-c2f2-4vp7",
  "euvd_id": "EUVD-2026-123280",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authenticated SQL injection in ADAudit Plus Reports API",
  "summary": "ADAudit Plus builds before 8703 contain an SQL injection issue in the Reports API. An attacker with valid access may cause unintended database operations, potentially affecting stored information and service availability.",
  "mitigation": "Upgrade ADAudit Plus to build 8703 or later. Restrict authenticated access to the Reports API until the upgrade is complete.",
  "vendor": "Zohocorp",
  "product": "ADAudit Plus",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 8703"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "8703"
      ],
      "package_name": "ADAudit Plus",
      "purl": null
    }
  ],
  "cwes": [
    89
  ],
  "cvss_score": 8.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 53.71784778333333,
  "t0_at": "2026-11-11T07:38:57.448000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-11T07:59:18.652233+00:00",
      "days": 0.014134308252314815,
      "is_lower_bound": false,
      "measured_at": "2026-11-11T07:38:57.448000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-11T07:38:57.448000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-11T07:38:57.448000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12062"
    }
  }
}