CVE Watch13 ago 2026

CVE-2017-18362

Kaseya VSA SQL Injection Vulnerability

CVSS

9.8

Crítico

EPSS

86.8%

p100

KEV

SÍ

24 may 2022

Exploit Today

0-100

Publicado: 5 feb 2019 · Última mod.: 13 ago 2026 · CWE-89

EPSS · 30d

86.7%EPSS · 30 días86.8%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Kaseya / Virtual System/Server Administrator (VSA)

Vulnerabilidad

Kaseya VSA SQL Injection Vulnerability

Añadido a KEV

24 may 2022

Remediar antes de

14 jun 2022

Uso conocido en ransomware

Sí

Descripción resumida

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

Acción requerida

The impacted product is end-of-life and should be disconnected if still in use.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2017-18362

Descripción técnica

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-826966.3 MED

—

——0A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_searchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.3h CVE-2026-59568.8 ALT

—

——0Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Ankara Hosting Site Management Panel allows SQL Injection. This issue affects Site Management Panel: through 15062026.3h CVE-2026-826206.3 MED

10.4%

——3A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This affects the function CourseDao.course_ranking of the file code/src/dao/CourseDao.java. Performing a manipulation of the argument cno results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.10h CVE-2026-826157.3 ALT

18.6%

——6A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::find_phone of the file /passwordrecover.php of the component Password Recovery Interface. The manipulation of the argument phonenumber leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.11h CVE-2026-826147.3 ALT

17.9%

——5A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.11h CVE-2026-826137.3 ALT

17.9%

——5A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.12h