CVE-2025-26186

HIGH CVSS: 8.1 Published: 2025-07-15 Modified: 2026-06-17

Description

SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute arbitrary code via the id parameter in Ajax.php

Affected Platforms

Os4Ed Opensis

Weakness Type

CWE-89

References