CVE-2026-18859 | ESAFENET CDG up to 20260615 usbkey;logindojojs keyid sql injection

A vulnerability classified as critical was found in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection.

This vulnerability is listed as CVE-2026-18859. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.