High · 8.8 CVE-2026-30711 EUVD-2026-13111GHSA-c44j-rqvr-7mwv

Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via th…

Published Mar 19, 2026 · Updated Mar 24, 2026 · Assigned by mitre

Description

Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent.

References

https://breakpoint.purrfect.fr/article/grr_audit.html#v4-sql-injection-in-session-inc-php-1
https://breakpoint.purrfect.fr/article/grr_audit.html