CVE-2026-25022Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Blind SQL Injection.This issue affects KiviCare: from n/a through <= 3.6.16.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-02-03: 3Technical Details · 2026-02-03: 302-03
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-25022: HIGH] SQL Injection vulnerability in Iqonic Design KiviCare Clinic Management System allows Blind SQL Injection. Impacting KiviCare versions from n/a to &lt;= 3.6.16.#cve,CVE-2026-25022,#cybersecurity https://cvefind.com/CVE-2026-25022

    Post summary

    The post announces a high‑severity blind SQL injection vulnerability in Iqonic Design KiviCare Clinic Management System affecting versions up to 3.6.16.

    0000058
    583 followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-25022 - High Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Blind SQL Injection.This ... https://www.thehackerwire.com/vulnerability/CVE-2026-25022/ https://t.co/HvZlEze1bY

    Post summary

    The text announces CVE-2026-25022, a high‑severity SQL injection vulnerability in Iqonic Design KiviCare, providing technical details but no PoC, exploit code, active exploitation evidence, or patch information.

    0000054
    113 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-25022 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows … https://www.cve.org/CVERecord?id=CVE-2026-25022

    Post summary

    The CVE is disclosed as an SQL injection vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system; no PoC, exploit, or patch details are provided.

    00000134
    56.5K followersView on X

Explore more