SQL Injection Vulnerability in Magistra by ACN
CVE-2026-112171

4.4MEDIUM

Key Information:

Status
Vendor
CVE Published:
9 November 2026

What is CVE-2026-112171?

This vulnerability allows an attacker to inject harmful SQL commands through inputs that are controlled by users. Exploiting this flaw enables unauthorized users to gain access to, modify, or disclose sensitive data stored in the database. It is crucial for organizations using Magistra to implement security measures to protect against this type of injection attack.

Affected Version(s)

MAGISTRA Windows 3.12

References

CVSS V4

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marco Sala
CSIRT-IT
ApoCert srl
.