SQL Injection Vulnerability in iomad Company Admin Block
CVE-2026-1517

5.1MEDIUM

Key Information:

Vendor

iomad

Status
Iomad
Vendor
CVE Published:
5 February 2026

What is CVE-2026-1517?

A vulnerability exists in iomad's Company Admin Block that allows an attacker to exploit an unknown function, resulting in SQL injection. This security weakness can be exploited remotely, leading to unauthorized data access or manipulation. Users are advised to upgrade to version 4.5 LTS or 5.0 to mitigate this risk and secure their deployments.

Affected Version(s)

iomad 3.1

iomad 3.2

iomad 3.3

References

https://vuldb.com/?id.344487
vdb-entrytechnical-description
https://vuldb.com/?ctiid.344487
signaturepermissions-required
https://github.com/iomad/iomad/issues/2559
issue-tracking

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vaibhav Gupta (Appfend Technologies Limited)
VulDB GitHub Analyzer
.