Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-52470 EUVD-2026-47606GHSA-f2q9-hhmf-6hfh

SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file

Published Jul 21, 2026 · Updated Jul 22, 2026 · Assigned by mitre