Critical Alert 3 Active Exploits Detected Today

CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability →
CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability →
CVE-2026-72898 — Metabase SQL Injection Vulnerability →
Powered by CVE Watchtower
×
August 11, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-59389NVD

Vulnerability Summary

An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following versions:
Hyper Data Protector 2.2.4.1 and later
Severity Level
HIGH(8.1)
Published Date
Jan 2, 2026
Last Modified
Jan 22, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-89: SQL Injection ↗
Improper neutralization of special elements used in an SQL command, allowing attackers to modify queries.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone

External References