CVE-2026-4978

CRITICAL

SQLi in UMAI Vision's Traffic Analysis System

Title source: cna
STIX 2.1

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34.

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
UMAI Vision/Traffic Analysis System 29 - 34
Published Jul 30, 2026
Tracked Since Jul 30, 2026