Gabriel-Lacorte/CVE-2026-36670

Gabriel-Lacorte/CVE-2026-36670

GitHubGitHub
GitHubgithub.com
Releases0
Time-Based Blind SQL Injection Exploit for the OpenSIPs Control Panel (or my first CVE!)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-36670↗
8.8 HIGH—

A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in alias_management.php.