Vulnerabilities

TI-2026-60405 CVE-2026-89180 · GHSA-h9qf-p2h6-6ph9

Thinking Software Technology｜EFence - SQL Injection

MEDIUM 44

EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00563 Published 2026-09-14 No fix listed CWE-89

TI-2026-55468 CVE-2026-80237 · GHSA-5w42-7c8c-6jj3

Thinking Software Technology｜Efence - Arbitrary File Upload

MEDIUM 41

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00786 Published 2026-08-26 No fix listed CWE-434

TI-2026-55467 CVE-2026-80236 · GHSA-365q-7r89-28jh

Thinking Software Technology｜Efence - SQL Injection

MEDIUM 45

Efence developed by Thinking Software Technology has a SQL Injection vulnerability.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0048 Published 2026-08-26 No fix listed CWE-89

TI-2026-55466 CVE-2026-80235 · GHSA-7xv4-f5x2-3xqj

Thinking Software Technology｜EFence - Arbitrary File Upload

MEDIUM 50