CVE-2026-12062

{
  "etk_id": "ETK-2026-4150",
  "cve_id": "CVE-2026-12062",
  "display_id": "CVE-2026-12062",
  "ghsa_id": "GHSA-847v-c2f2-4vp7",
  "euvd_id": "EUVD-2026-123280",
  "status": "in_pipeline",
  "anchor_state": "anchored",
  "title": "Authenticated SQL injection in ADAudit Plus Reports API",
  "summary": "ADAudit Plus versions earlier than build 8703 are affected by an SQL injection flaw in the Reports API. An authenticated attacker may be able to manipulate database queries through that API.",
  "mitigation": "Upgrade ADAudit Plus to build 8703 or later.",
  "vendor": "Zohocorp",
  "product": "ADAudit Plus",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 8703"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "8703"
      ],
      "package_name": "ADAudit Plus",
      "purl": null
    }
  ],
  "cwes": [
    89
  ],
  "cvss_score": 8.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 10.666529816666667,
  "t0_at": "2026-11-11T07:38:57.448000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-11T07:59:18.652233+00:00",
      "days": 0.014134308252314815,
      "is_lower_bound": false,
      "measured_at": "2026-11-11T07:38:57.448000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-11T07:38:57.448000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-11T07:38:57.448000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12062"
    }
  }
}