Skip to content
OpenAdvisories

Vendor

Tranquil_IT

1 known vulnerabilities.

Products

WAPT 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-75132

    WAPT Server SQL Injection via /api/v3/hosts Endpoint

    WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL …

    Tranquil_IT WAPT