high
advisory
Starnet Inventory Tracking Application: SQL Injection (CVE-2026-74993)
An SQL injection vulnerability in the Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection.
CVE search metadata
CVE search record: CVE-2026-74993. Severity: high. CVSS: 7.5. KEV: no. Product: Inventory Tracking Application (through 2026-10-16). Brief: Starnet Inventory Tracking Application: SQL Injection (CVE-2026-74993). Brief link: https://feed.craftedsignal.io/briefs/2026-11-starnet-sql-injection/
Triage facts
Revision 1- Applicability
- Inventory Tracking Application (through 2026-10-16)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 2, 15:48 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-74993 describes an improper neutralization of special elements used in an SQL command (SQL injection) vulnerability in the Starnet Computer and Network Systems Inventory Tracking Application. This issue affects the Inventory Tracking Application in all versions through 2026-10-16.
Impact
The vulnerability allows SQL Injection.