CVE-2026-2820Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in Fujian Smart Integrated Management Platform System up to 7.5. This issue affects some unknown processing of the file /Module/CRXT/Controller/XAccessPermissionPlus.ashx. The manipulation of the argument DeviceIDS results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-02-20); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-02-20: 2Mentions · 2026-02-25: 1Technical Details · 2026-02-20: 1Technical Details · 2026-02-25: 102-2002-25
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-02-202
Disclosure1General1
2026-02-251
Disclosure1
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-2820 SQL Injection in Fujian Smart Integrated Management Platform System 7.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2820 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    A new SQL Injection vulnerability (CVE-2026-2820) affecting Fujian Smart Integrated Management Platform System 7.5 has been disclosed via VulMon links.

    0001042
    4.0K followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-2820 (CVSS:6.9, HIGH) is Awaiting Analysis. A security flaw has been discovered in Fujian Smart Integrated Management Platform System up to 7.5. This issue affects ..https://nvd.nist.gov/vuln/detail/CVE-2026-2820 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    A new vulnerability, CVE-2026-2820, with a CVSS score of 6.9 (HIGH) has been identified in Fujian Smart Integrated Management Platform System up to version 7.5, but no PoC, exploit, or patch details are provided.

    0000039
    172 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-2820 A security flaw has been discovered in Fujian Smart Integrated Management Platform System up to 7.5. This issue affects some unknown processing of the file /Module/CRXT… https://www.cve.org/CVERecord?id=CVE-2026-2820

    Post summary

    The post references a CVE with a brief, vague description of the issue, but lacks specific details on exploitation, patches, or technical classification.

    0000061
    56.4K followersView on X

Explore more