CVE-2026-63314
CVE-2026-63314 · SQL Injection in WebCTI
This page contains facts from public vulnerability sources. Check the original advisory before updating.
WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.
CVSS 8.7 · High · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
ipx
- Versions
- ≥ 0, < 6.62.0100: Affected (semver)
Update to 6.62.0100