Cpe:2.3:a:teracity:e-Osb:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3ateracitye-osb/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 01 Sep 2026 15:06:32 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSQL Injection Vulnerability in Teracity E-OSBhttps://feed.craftedsignal.io/briefs/2026-09-cve-2026-18765/Tue, 01 Sep 2026 15:06:32 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-cve-2026-18765/Teracity E-OSB versions prior to V02.26.07.08.01 contain an SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL commands against the backend database.Teracity Software Technologies Inc. E-OSB is vulnerable to SQL injection (CVE-2026-18765) due to improper neutralization of special elements used in SQL commands. This vulnerability allows an unauthenticated remote attacker to inject malicious SQL statements through crafted input fields. Successful exploitation could lead to unauthorized access to sensitive data, modification of application records, or potential administrative control over the underlying database. The vulnerability affects all versions of E-OSB released prior to V02.26.07.08.01. Organizations utilizing this platform should prioritize updating to the patched version immediately to mitigate the risk of data exfiltration or integrity compromise.

Impact

The vulnerability carries a CVSS v3.1 base score of 9.8, indicating a critical severity. Exploitation allows unauthenticated actors to bypass authentication or manipulate database records. Depending on the database permissions and configuration, this could result in full data exfiltration, system compromise, or complete loss of database availability.

Recommendation

Update all deployments of Teracity E-OSB to version V02.26.07.08.01 or later to remediate CVE-2026-18765.

  • Upgrade the affected application to version V02.26.07.08.01 immediately.
  • Monitor web application firewall logs for SQL injection signatures targeting the E-OSB application.
  • Audit database logs for anomalous queries or unauthorized access patterns initiated by the E-OSB service account.
]]>criticaladvisorysql-injectionvulnerabilityweb-application