{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ateracitye-osb/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:teracity:e-osb:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-18765"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["E-OSB (\u003c V02.26.07.08.01)"],"_cs_severities":["critical"],"_cs_tags":["sql-injection","vulnerability","web-application"],"_cs_type":"advisory","_cs_vendors":["Teracity Software Technologies Inc."],"content_html":"\u003cp\u003eTeracity Software Technologies Inc. E-OSB is vulnerable to SQL injection (CVE-2026-18765) due to improper neutralization of special elements used in SQL commands. This vulnerability allows an unauthenticated remote attacker to inject malicious SQL statements through crafted input fields. Successful exploitation could lead to unauthorized access to sensitive data, modification of application records, or potential administrative control over the underlying database. The vulnerability affects all versions of E-OSB released prior to V02.26.07.08.01. Organizations utilizing this platform should prioritize updating to the patched version immediately to mitigate the risk of data exfiltration or integrity compromise.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability carries a CVSS v3.1 base score of 9.8, indicating a critical severity. Exploitation allows unauthenticated actors to bypass authentication or manipulate database records. Depending on the database permissions and configuration, this could result in full data exfiltration, system compromise, or complete loss of database availability.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpdate all deployments of Teracity E-OSB to version V02.26.07.08.01 or later to remediate CVE-2026-18765.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the affected application to version V02.26.07.08.01 immediately.\u003c/li\u003e\n\u003cli\u003eMonitor web application firewall logs for SQL injection signatures targeting the E-OSB application.\u003c/li\u003e\n\u003cli\u003eAudit database logs for anomalous queries or unauthorized access patterns initiated by the E-OSB service account.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-09-01T15:06:32Z","date_published":"2026-09-01T15:06:32Z","id":"https://feed.craftedsignal.io/briefs/2026-09-cve-2026-18765/","summary":"Teracity E-OSB versions prior to V02.26.07.08.01 contain an SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL commands against the backend database.","title":"SQL Injection Vulnerability in Teracity E-OSB","url":"https://feed.craftedsignal.io/briefs/2026-09-cve-2026-18765/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:teracity:e-Osb:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}