CVE-2025-28076

Summary

CVE-2025-28076 refers to multiple SQL injection vulnerabilities in EasyVirt DCScope version 8.6.4 and CO2Scope version 1.3.4. These vulnerabilities enable remote authenticated attackers to execute arbitrary SQL commands by manipulating specific parameters in API endpoints. The affected endpoints include /api/management/updateihmsettings and /api/capaplan/savetemplates. The parameters that can be exploited are timeago, user, filter, target, p1 to p20. Attackers can inject SQL commands into these parameters to gain unauthorized access or perform unintended actions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.