SIREC vulnerabilities

CVEs whose affected-version data names the SIREC package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-123087High· 8.7

2d ago

SQL injection in Atmira’s SIREC

SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows…

▾ TwilightAtmira · SIRECEPSS 0.25%via CVEORG