EIP-2026-105093

PRE-CVE

Alienvault Open Source SIEM (OSSIM) 4.1.2 - Multiple SQL Injections

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105093. PoCs published by RunRunLevel.

AI-analyzed exploit summary This is a vulnerability writeup detailing multiple SQL injection vulnerabilities in AlienVault OSSIM 4.1.2 and below. It also mentions that the MySQL database runs with root privileges, potentially allowing full system compromise.

Description

Alienvault Open Source SIEM (OSSIM) 4.1.2 - Multiple SQL Injections

Exploits (1)

exploitdb WRITEUP

by RunRunLevel · textwebappsphp

https://www.exploit-db.com/exploits/25447

View Code ZIP pw:eip

This is a vulnerability writeup detailing multiple SQL injection vulnerabilities in AlienVault OSSIM 4.1.2 and below. It also mentions that the MySQL database runs with root privileges, potentially allowing full system compromise.

Classification

Writeup 100%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: AlienVault OSSIM 4.1.2 (and below)

No auth needed

Prerequisites: Network access to the OSSIM web interface

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026