CVE-2026-0242
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform.
Risk Assessment
An authenticated attacker could access and modify data and take administrative control of the platform. This poses a serious risk to confidentiality, integrity, and availability.
Recommendation
Apply vendor fixes or mitigations immediately. Restrict authenticated accounts to the minimum necessary and monitor for unusual database queries.
Other vulnerabilities in Trust Protection Foundation
See all- CVE-2026-0241High
An incorrect authorization vulnerability in Trust Protection Foundation allows attackers to bypass access controls and perform unauthorized actions on restricted resources.
- CVE-2026-0240High
An information disclosure vulnerability in Trust Protection Foundation allows an authenticated attacker to access sensitive data from the server's vault. Exploitation enables impersonation of any user and arbitrary modification of configuration settings.
Original NVD description (English source)
A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS