CVE-2026-1050 | risesoft-y9 Digital-Infrastructure up to 9.6.7 REST Authenticate Endpoint Y9PlatformUtil.java sql injection

A vulnerability, which was classified as critical, was found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection.

This vulnerability is tracked as CVE-2026-1050. The attack can be launched remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.