Skip to content
OpenAdvisories
Medium VA-26-310-01 1 CVE

Catalis WebPro SQLi

Published Nov 13, 2026 · Updated Nov 13, 2026

Vendor: Catalis Product: WebPro

Summary

Patriot Properties WebPro 5.0 allows a remote unauthenticated attacker to execute arbitrary SQL queries against the underlying MSSQL database, enabling exfiltration of sensitive property and taxpayer information.

Vulnerabilities 1

  • Medium 6.9
    CVE-2026-124041

    Catalis/Patriot Properties WebPro 5.0 allows a remote unauthenticated attacker to execute arbitrary SQL queries against…

    Catalis WebPro

Revision history

  1. #1.0.0

    Initial publication