CVE-2025-22992

Summary

CVE-2025-22992 is a SQL Injection vulnerability affecting the Emoncms project versions 11.6.9 and above. The issue lies in the /feed/insert.json endpoint, where user-supplied data in the data query parameter is not adequately sanitized, enabling attackers to execute arbitrary SQL commands under specific conditions. This vulnerability poses a significant risk, as it may lead to unauthorized data access, modification, or even complete system compromise. Users are strongly urged to apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.