Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Ncvav records in CISA KEVNo Ncvav vulnerabilities are listed in CISA KEV.
Priority MEDIUM 49
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX Software allows SQL Injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00377 · Published 2025-07-28 · Fixed in 09.07.2025 CWE-89
Open these records in search →