SQL Injection Vulnerability in Integratec Application

CVE-2026-13695

What is CVE-2026-13695?

The Integratec application is susceptible to a UNION-based SQL injection vulnerability via the sInfo parameter in POST requests to the /login/ap_Login.aspx/start endpoint. Successful exploitation could enable attackers to access sensitive data, including user credentials and personal information, leading to data exfiltration and potential privilege escalation. This vulnerability poses a significant risk as it could also trigger errors and partial denial-of-service conditions within the application, complicating remediation efforts.

References