LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2026-32499

CVE-2026-32499 - Vulnerability Analysis

CriticalCVSS: 9.3

Last Updated: March 26, 2026

QuantumCloud ChatBot - SQL Injection

Published: March 25, 2026Updated: March 26, 2026Remote Exploitable

Overview

QuantumCloud ChatBot <= 7.7.9 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted input.

Severity & Score

Severity: Critical
CVSS Score: 9.3

Impact

Attackers can execute arbitrary SQL queries, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version beyond 7.7.9.

Details

CVE ID
CVE-2026-32499
Severity
Critical
CVSS Score
9.3
Type
sql_injection
Status
new

CWE

  • CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L