Read the docs
TI-2026-04578 Aliases CVE-2026-5242GHSA-qv7c-w6cp-c775

Code Injection in Mia Technologies' Pizzy Library

Priority MEDIUM 40CWE-1236Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pizzy Library allows Code Injection. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00304 23rd percentileScored 2026-11-07
Fix Fixed Pizzy Library (MIA Technology Inc.): 1.3.9.26250

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Mia Technology Inc.Pizzy Library1.0.0.26250 to before 1.3.9.262501.3.9.26250Patch availableCNA
  • Pizzy Library VendorMia Technology Inc. Affected 1.0.0.26250 to before 1.3.9.26250 Fixed in 1.3.9.26250 Patch available CNA

Remediation

  • Fix · CNA Pizzy Library (MIA Technology Inc.) Fixed in 1.3.9.26250

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    MIA Technology Pizzy Library 1.3.9.26250

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-04570 Missing Rate Limiting in Mia Technologies' Pizzy LibraryPriority LOW 31
    • TI-2026-04568 Improper Access Control in Mia Technologies' Pizzy LibraryPriority LOW 30
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-5242
  2. 2026-10-03 Alias added: GHSA-qv7c-w6cp-c775

References

Other 1

  • TI-2022-03451 SQLi in Mia-Med CVSS 3.1CRITICAL 9.8
  • TI-2023-05971 IDOR in Mia Technology's Mia-Med CVSS 3.1HIGH 8.8
  • TI-2023-05975 Seeing admin password hash value in Mia Technology's Mia-Med CVSS 3.1HIGH 7.5
  • TI-2023-05974 Password Disclosure in Mia Technology's Mia-Med CVSS 3.1HIGH 7.5
  • TI-2023-05973 Seeing the SMS Verification Code in Mia Technology's Mia-Med CVSS 3.1HIGH 7.5
  • TI-2024-05436 User Enumeration in Mia Technology's Mia-Med Health Aplication CVSS 3.1HIGH 7.5
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences