Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4568 by default. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. . Was ZDI-CAN-28726.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
[ZDI-26-286|CVE-2026-5490] DriveLock SQL Injection Privilege Escalation Vulnerability (CVSS 8.8; Credit: stuxxn) https://www.zerodayinitiative.com/advisories/ZDI-26-286/
Post summary
The advisory discloses a DriveLock SQL injection privilege escalation flaw with a CVSS score of 8.8, crediting 'stuxxn', and provides a link for more details, but offers no evidence of exploitation or patch instructions.
CVE-2026-5490 describes a high-severity SQL Injection Privilege Escalation vulnerability in DriveLock, published on July 29, 2026, with a CVSS score of 8․8. https://ift.tt/1jXNDzF
Post summary
CVE-2026-5490 is a newly disclosed SQL Injection Privilege Escalation flaw in DriveLock with a high CVSS score of 8.8, but no PoC, exploit, or patch info is provided.