Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-18859](https://ucn9h68n9289.feishu.cn/docx/LHkddOv7Jo6quTxlJKZcf8gfnOe?from=from_copyli... https://ucn9h68n9289.feishu.cn/docx/LHkddOv7Jo6quTxlJKZcf8gfnOe?from=from_copylink #Vulnerability #CVE #ZeroDay
Post summary
The tweet merely announce the existence of CVE‑2026‑18859 and links to a document without giving technical or exploit details.
CVE-2026-18859 SQL Injection in ESAFENET CDG Up to 20260615 via Keyid Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-18859
Post summary
The text announces a CVE‑2026‑18859 SQL Injection vulnerability in ESAFENET CDG, affecting versions up to 20260615 through the Keyid parameter.