A vulnerability has been found in Sunnet CTMS and classified as critical. The affected element is an unknown function. The manipulation leads to sql injection.
This vulnerability is traded as CVE-2026-7489. It is possible to initiate the attack remotely. There is no exploit available.
