CVE-2026-6887

CriticalCVSS 9.8/10Last modified Oct 26, 2026

Description

Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
BorG Technology CorporationBorg SPM 20070

References

Timeline

Published
Apr 23, 2026
Last modified
Oct 26, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-688705.3The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through thCVE-2026-688716.5The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnCVE-2026-688726.5The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection oCVE-2026-688735.5Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclosCVE-2026-688745.7Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.CVE-2026-688757.8Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.CVE-2026-688768.0Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a netCVE-2026-688777.8Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.CVE-2026-688788.0Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.CVE-2026-68887.2Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a sCVE-2026-688808.0Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.CVE-2026-688815.5Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-6887: Critical severity, CVSS 9.8 | Vulnix