CVE-2025-56699

5.4 mediumEPSS 0.3%

Medium (5.4). EPSS 0.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in the cmd component of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows an unauthenticated user to execute arbitrary SQL commands via the sender parameter.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://basedigitale.com/integrated-security-solutions/security-asset-management/centrax/
https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2025-56699

Check your stack JSON