Read the docs

Ncvav

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ncvav records in CISA KEV

No Ncvav vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-06291 CVE-2025-6918 · GHSA-76hg-cg4f-g27p

SQLi in Ncvav's Virtual PBX Software

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX Software allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00377 Published 2025-07-28 Fixed in 09.07.2025 CWE-89
Open these records in search →