Intel

CVE-2026-51821

SQL-Injektionsanfälligkeit im ShenZhou ShiHan Videokonferenzsystem v.

criticalEPSS 0.8%

Description

SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /user/getUserLogin endpoint

Source: NVD (NIST)CVE.org (MITRE)cvelistv5

Metrics

XIEM Effective CVSS
9.8
Source: nvd-v3
EPSS percentile
54.2 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
KEV status
—
Show all metrics
Severity
critical
Priority score
94.66
Exploit maturity
no public PoC known
CVSS v3
9.8
EPSS score
0.8 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-13 22:16 UTC

References & sources

Linked advisories