CVE-2026-74993

HighCVSS 7.5/10Last modified Nov 2, 2026

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection.

This issue affects Inventory Tracking Application: through 2026-10-16.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
Starnet Computer and Network SystemsInventory Tracking Application<= 2026-10-16

References

Timeline

Published
Nov 2, 2026
Last modified
Nov 2, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-749946.0The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configurCVE-2026-749978.8In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code executionCVE-2026-749987.2In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which mCVE-2026-749995.4In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS.CVE-2026-75005.4When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled. Five endpoints undCVE-2026-750005.8In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the SVG animate "by" attribute may lead to remoCVE-2026-750027.1In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information dCVE-2026-750039.8In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image could evade the remote iCVE-2026-750044.3In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesieve_disabled_actions setting bypCVE-2026-750057.5Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an exteCVE-2026-750065.8In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages maCVE-2026-750078.8In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitut
CVE-2026-74993: High severity, CVSS 7.5 | Vulnix