Skip to content
OpenAdvisories

Vendor

Nemon

1 known vulnerabilities.

Products

Nemon Trade Energy 1 Nemon Trade Energy CRM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-10731

    SQL injection in Nemon products

    SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. The two-factor authentication (2FA) functionality can be accessed without prior authentication, allowing unauthenticat…

    Nemon Nemon Trade Energy CRM Nemon Trade Energy