CVE-2026-5490
Deferred Deferred - Pending Action

SQL Injection in DriveLock Web Service

Publication date: 2026-07-29

Last updated on: 2026-07-31

Assigner: Zero Day Initiative

Description
DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4568 by default. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. . Was ZDI-CAN-28726.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-29
Last Modified
2026-07-31
Generated
2026-08-19
AI Q&A
2026-07-30
EPSS Evaluated
2026-08-18
NVD
CVE-2026-5490

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
drivelock drivelock *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a SQL injection vulnerability in DriveLock that allows remote attackers with authentication to escalate privileges. The flaw exists in the web service running on TCP port 4568 due to improper validation of user-supplied input in SQL queries.

Detection Guidance

Check if the DriveLock web service is listening on TCP port 4568 using commands like 'netstat -tuln | grep 4568' or 'ss -tuln | grep 4568'. Look for suspicious SQL query patterns in logs or network traffic.

Impact Analysis

An attacker could exploit this to gain elevated access to resources that should be restricted, potentially leading to unauthorized data access, modification, or system control. Authentication is required, but the impact is significant as it allows privilege escalation.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, violating compliance requirements for GDPR, HIPAA, and other regulations that mandate strict access controls and data protection.

Mitigation Strategies

Apply patches or updates from DriveLock if available. Restrict access to the web service on port 4568 using firewalls. Monitor for unusual privilege escalation attempts or SQL injection patterns in logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-5490. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart