CVE-2026-75132
Received Received - Intake

SQL Injection in WAPT Server

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: VulnCheck

Description
WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT. By exploiting the injection point, an attacker can inject additional PostgreSQL statements, bypass the host scope restrictions applied to the account, and read information from other rows or tables within the database.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-75132
EUVD
EUVD-2026-68606

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wapt wapt_server to 2.6.1.17834 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a SQL injection vulnerability in WAPT Server versions 2.6.1.17834 and earlier. It exists in the columns parameter of the GET /api/v3/hosts endpoint. An authenticated remote attacker with read-only privileges can inject malicious PostgreSQL expressions into the SQL query, allowing them to execute additional statements and bypass host scope restrictions to access unauthorized data.

Detection Guidance

To detect this vulnerability, monitor network traffic for suspicious GET requests to the /api/v3/hosts endpoint with unusual parameters in the columns field. Check WAPT server logs for PostgreSQL errors or unexpected queries. Use tools like Wireshark to inspect HTTP requests for SQL injection patterns in the columns parameter.

Impact Analysis

An attacker could exploit this to read sensitive information from other database rows or tables, bypassing access controls. Even with read-only privileges, they can manipulate queries to access unauthorized data, potentially leading to data breaches or information disclosure.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating confidentiality requirements in GDPR and HIPAA. It may result in data breaches, triggering mandatory breach notifications and potential fines under these regulations.

Mitigation Strategies

Immediately upgrade WAPT server to version WAPT-2.6.1.17852 or later. If immediate upgrade is not possible, restrict access to the /api/v3/hosts endpoint and disable read-only user privileges until patched. Monitor database logs for unauthorized queries and revoke any suspicious user sessions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75132. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart