SQL Injection Vulnerability in Interuse i-Bos Product
CVE-2026-59508

5.9MEDIUM

Key Information:

Vendor

Interuse

Status
I-bos
Vendor
CVE Published:
11 October 2026

What is CVE-2026-59508?

A vulnerability exists in the Interuse i-Bos product due to improper neutralization of special elements in an SQL command. This SQL injection flaw can be exploited by an attacker to interfere with the commands executed by the database, potentially allowing unauthorized access to sensitive information. The affected version of i-Bos is 3.0, and it is crucial for users to mitigate risks associated with this vulnerability to safeguard their systems.

Affected Version(s)

i-Bos 3.0

References

https://www.gov.il/en/departments/dynamiccollectors/cve_a...

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Mangesto
.