CVE-2025-55787

CriticalCVSS 9.8/10Last modified Sep 22, 2026

Description

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2026
Last modified
Sep 22, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-55799.8A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unkCVE-2025-557953.5The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during eCVE-2025-557967.5The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup conCVE-2025-557976.5An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers CVE-2025-55809.8A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part oCVE-2025-55819.8A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been declared as critical. This vulnerability affects unknoCVE-2025-558106.8A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, whCVE-2025-558166.1HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.CVE-2025-55829.8A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown proCVE-2025-558246.5ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commandsCVE-2025-55839.8A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of theCVE-2025-558346.1A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logControll
CVE-2025-55787: Critical severity, CVSS 9.8 | Vulnix