What is GHSA-x2hr-mpw9-c694?

GHSA-x2hr-mpw9-c694 is a security advisory published by GitHub Security Advisories with High severity. SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a...

Which CVE IDs does GHSA-x2hr-mpw9-c694 cover?

GHSA-x2hr-mpw9-c694 covers the following CVE IDs: CVE-2026-123087. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-x2hr-mpw9-c694High

SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a...

Vendor

GitHub Security Advisories

Published

November 6, 2026

Last Modified

November 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-123087 →

📋 Description

SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causing the database to return unexpected information.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-123087
https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-atmiras-sirec
https://github.com/advisories/GHSA-x2hr-mpw9-c694