PoC Index85,079 CVEs with PoCs

CVE-2026-36670

HIGH 8.8EPSS 0.4%

A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in alias_management.php.

CVSS v3.1 CNA
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.43% chance of exploitation in the next 30 days, 36th percentile
Published
2026-06-15
Updated
2026-06-16

Proof-of-concept exploits (1)

References

Related