CVE-2026-118871Medium· 6.5▾ SunlitSQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in.
elasticnet_rnia_r18_ngi NGIV16.26.11SP04 and earlier versionsRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108506Medium· 5.5ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control
CVE-2026-108505Low· 3.3ZTE Z80 Ultra has a local information disclosure vulnerability
CVE-2026-108504Medium· 5.5ZTE Z80 Ultra has an unauthorized information disclosure vulnerability
CVE-2026-108503Low· 3.3ZTE Z80 Ultra has an interface permission validation vulnerability
CVE-2026-108502Low· 3.3ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs.
CVE-2026-108501Medium· 5.7ZTE Z80 Ultra has a system interface permission verification defect