What is CVE-2026-50769?
A time-based SQL Injection vulnerability exists in the 'check conflict' endpoint of Brainformatik CRM+ application versions up to and including 2025.6. This allows attackers to interfere with database queries during calendar conflict checks. Immediate update to the latest version is recommended.
Azərbaycanca: Brainformatik CRM+ proqramının 2025.6 və daha əvvəl versiyalarında 'check conflict' endpoint-ində time-based SQL Injection zəifliyi aşkarlanıb. Bu, təqvim münaqişəsi yoxlanışı zamanı məlumat bazasına müdaxiləyə imkan verir. Təcili olaraq proqramı ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-89
FAQ2
Which functionality in Brainformatik CRM+ is affected by the SQL Injection vulnerability?
The vulnerability exists in the 'check conflict' endpoint during calendar conflict checks.
What should users do to protect against CVE-2026-50769?
Immediate update to the latest version is recommended.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.