CVE-2026-84813

CriticalCVSS 9.3/10Last modified Sep 4, 2026

Description

Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.

Metrics

CVSS 3.1 9.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 3, 2026
Last modified
Sep 4, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-848149.8Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.CVE-2026-848155.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold allows Reflected XSS. TCVE-2026-848167.1Unauthenticated Cross Site Scripting (XSS) in WPCS <= 1.3.2 versions.CVE-2026-848177.1Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.CVE-2026-848187.1Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.CVE-2026-848197.1Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.3 versions.CVE-2026-84824.3A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (inclCVE-2026-848207.1Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.CVE-2026-848217.5Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions.CVE-2026-848237.1A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploitCVE-2026-848286.5A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit the 'pcs hostCVE-2026-848298.8The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute,
CVE-2026-84813: Critical severity, CVSS 9.3 | Vulnix