Skip to content
OpenAdvisories
Critical VA-26-204-01 1 CVE

Appriss Insights VINE Application SQL Injection

Published Jul 23, 2026 · Updated Aug 4, 2026 · Revision 2

Vendor: Appriss Insights Product: Victim Information Notification Exchange (VINE)

Summary

The Appriss Insights (Equifax) VINE applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information from the database.

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-63359

    Appriss Insights VINE SQLI

    The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access …

    Appriss Insights Victim Information Notification Exchange (VINE)

Revision history

  1. #2.0.0

    Added fixed date and 'exclusively-hosted-service' tag

  2. #1.0.0

    Initial publication