VulnSocial

CVE-2026-45779Disclosure(buffalo / open_xdmod)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch buffalo open_xdmod systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an unauthenticated remote attacker to execute arbitrary SQL statements. Exploitation requires no authentication or user interaction and can result in complete compromise of the underlying database. All deployments of Open XDMoD prior to 10.0.3 are impacted. This issue was discovered on 2023-08-03 and patched on 2023-08-04. At this time there is no evidence that this vulnerability has been exploited in the wild. The vulnerability was patched in Open XDMoD 10.0.3 on 2023-08-04. As a workaround, apply the patch manually.

buffalo CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • open_xdmod

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-06-06); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
buffalo
Products
open_xdmod

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-06: 2Mentions · 2026-07-30: 1Patch / Workaround · 2026-07-30: 1Technical Details · 2026-06-06: 2Technical Details · 2026-07-30: 106-0607-30
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-062
Disclosure2
2026-07-301
Patch1
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 CRITICAL: CVE-2026-45779 - OpenXDMoD SQL Injection (CVSS 9.8) Unauthenticated remote SQL injection in OpenXDMoD <10.0.3. No user interaction needed. Complete database compromise possible. Patch to 10.0.3 immediately. #CVE #PatchNow #ThreatIntel https://t.co/1KJ8AiY6hg

    Post summary

    The tweet announces a critical unauthenticated SQL injection vulnerability in OpenXDMoD (<10.0.3) with CVSS 9.8 and urges immediate patching to version 10.0.3.

    0000051
    98 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-45779 OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an u… https://www.cve.org/CVERecord?id=CVE-2026-45779

    Post summary

    A SQL injection vulnerability in OpenXDMoD versions before 10.0.3 has been disclosed, with no mention of PoC, exploit code, active exploitation, or remediation.

    00000148
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-45779 Unauthenticated SQL Injection in Open XDMoD Versions Prior to 10.0.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45779

    Post summary

    The post briefly discloses CVE-2026‑45779, an unauthenticated SQL injection affecting Open XDMoD versions before 10.0.3, with no mention of exploitation or mitigation.

    0000046
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appbuffaloopen_xdmod---

Explore more

Back to dashboardbuffalo CVEsopen_xdmod vulnerabilities