Shenzhen Ruiming Technology Streamax Crocus bis SQL Injection Vulnerability

hello@craftedsignal.io — Fri, 27 Mar 2026 04:16:08 +0000

A SQL injection vulnerability, identified as CVE-2026-4910, affects Shenzhen Ruiming Technology Streamax Crocus bis version 1.3.44. The vulnerability is located within the /RemoteFormat.do file, specifically the Endpoint component. By manipulating the State argument, a remote attacker can inject arbitrary SQL commands. Publicly available exploits exist, increasing the risk of exploitation. The vendor was notified but did not respond. Successful exploitation could lead to unauthorized data…

Cve-2026-4910 — CraftedSignal Threat Feed

Shenzhen Ruiming Technology Streamax Crocus bis SQL Injection Vulnerability