CVE-2026-63314

Status: Received

Description

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.

Published
October 15, 2026 9:17 AM
Last Modified
October 15, 2026 9:17 AM
Source
[email protected]

Weaknesses (CWE)

CWE-89

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry