A vulnerability categorized as critical has been discovered in dameng100 muucmf 1.9.5.20260309. Impacted is the function
getListByPage of the file /index/Search/index.html. Executing a manipulation of the argument keyword can lead to sql injection.
This vulnerability appears as CVE-2026-6562. The attack may be performed from remote. In addition, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
