CVE-2026-75132— WAPT Server SQL Injection via /api/v3/hosts Endpoint
Quick assessment
Affected
Tranquil_IT WAPT
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WAPT Server 版本 2.6.1.17834 及更早版本存在 SQL 注入漏洞，位于 GET 端点的 参数中。具有只读权限的远程已认证用户可以将任意 PostgreSQL 表达式注入到 WAPT 构建的 SQL 查询中。通过利用该注入点，攻击者可以注入额外的 PostgreSQL 语句，绕过应用于该账户的主机范围限制，从而读取数据库中其他行或表中的信息。
Possible ATT&CK Techniques 1 AI
T1210.001
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-75132
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WAPT Server SQL Injection via /api/v3/hosts Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT. By exploiting the injection point, an attacker can inject additional PostgreSQL statements, bypass the host scope restrictions applied to the account, and read information from other rows or tables within the database.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Tranquil_IT | WAPT | 2.6.x ~ 2.6.1.17834 | - |
|
II. Public POCs for CVE-2026-75132
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-75132
请登录查看更多情报信息。
Other References for CVE-2026-75132 (2)
-
🔗 WAPT Server SQL Injection via /api/v3/hosts Endpoint | Advisories | VulnCheck third-party-advisory
-
IV. Related Vulnerabilities
Same weakness: CWE-89
-
CVE-2026-82701
code-projects Online Shopping System Search Functionality ac -
CVE-2026-82696
itsourcecode Sales and Inventory System inv_searchfrm.php sq -
CVE-2026-5956
SQLi in Ankara Hosting's Site Management Panel -
CVE-2026-82620
Soarkey StudentManagement/学生信息管理系统 CourseDao.java CourseDao. -
CVE-2026-82615
itsourcecode Online Medicine Delivery System Password Recove
V. Comments for CVE-2026-75132
No comments yet