Read the docs

Nemon

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Nemon records in CISA KEV

No Nemon vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-09226 CVE-2026-10731 · GHSA-cg52-fw3m-jv5q

SQL injection in Nemon products

Priority MEDIUM 48

SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00349 Published 2026-06-09 No fix listed CWE-89
Open these records in search →