CVE-2021-26751

8.8 highEPSS 1.2%

High (8.8) in nedi nedi. EPSS 1.2% chance of exploitation in the next 30 days.

NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-02-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nedi:nedi

References

https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/
https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/

Check your stack JSON