Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQL query. This causes the Pro Cloud Server service to terminate unexpectedly. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.1 (build 167) and below were tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-19 | 1 | Disclosure1 |
| 2026-05-21 | 1 | Active Exploitation1 |
| 2026-06-02 | 1 | General1 |
Warning: 1 critical, 4 High, all actively exploited vulnerabilities in #Sparx Pro Cloud Server, Enterprise Architect #CVE-2026-42096 #CVE-2026-42097 #CVE-2026-42098 #CVE-2026-42099 #CVE-2026-42100 CVSS: 9.3-7.1 #PoC available #Patch #Patch #Patch
Post summary
The post warns of multiple actively exploited Sparx Pro Cloud Server CVEs, notes PoC availability, and indicates patches are ready, underscoring an urgent threat.
🟠 Sparx Pro Cloud Server, Improper Handling of Syntactically Invalid Structure, #CVE-2026-42100 (Medium) -DC-Jun2026-106 https://dailycve.com/sparx-pro-cloud-server-improper-handling-of-syntactically-invalid-structure-cve-2026-42100-medium-dc-jun2026-106/
Post summary
The post announces CVE‑2026‑42100 for Sparx Pro Cloud Server as a medium‑severity issue involving improper handling of syntactically invalid structure, but provides no deeper technical details, exploit information, or mitigation steps.
CVE-2026-42100 Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQ… https://www.cve.org/CVERecord?id=CVE-2026-42100
Post summary
The post announces CVE-2026-42100, a DoS vulnerability in Sparx Pro Cloud Server caused by improper handling of syntactically invalid structures, but offers no further details on PoC, exploitation, or fixes.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | sparxsystems | pro_cloud_server | - | - | - |