CVE-2026-86595High· 8.8▾ MidnightPoC availableImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection. This issue affects enVision: before 260655.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 48.4 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
6.5 → 8.8
medium → high
0.2%
1 GitHub repo
0.2% → 0.3%
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection.
This issue affects enVision: before 260655.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2017-18362Critical· 9.8ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database
CVE-2019-7481High· 7.5Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources
CVE-2017-20252High· 8.2Joomla NextGen Editor 2.1.0 SQL Injection via plname Parameter
CVE-2015-20120High· 8.2RealtyScript 4.0.2 Multiple Time-based Blind SQL Injection
CVE-2019-25778High· 8.2SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter
CVE-2024-58393High· 8.2i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php