SQL Injection in Buffalo Open_xdmod
CVE-2026-45779
OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an unauthenticated remote attacker to execute arbitrary SQL statements. Explo…
Vulnerability class: SQL Injection
EPSS: 0.005 (38.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Buffalo Open_xdmod
- Ubccr Xdmod — versions < 10.0.3
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC, Release Notes)
- security-advisories@github.com (x_refsource_CONFIRM, Patch, Mitigation, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-45779?
- CVE-2026-45779 is a critical-severity vulnerability in Buffalo Open_xdmod, classified under SQL Injection. CVSS score: 9.8/10. Published 2026-06-05.
- How severe is CVE-2026-45779?
- Critical severity. CVSS v3 base score is 9.8 out of 10.