Security Advisory

CVE-2025-65235

9.8
CRITICAL

Vulnerability Description

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function.
Published Date November 26, 2025
Official Source NIST NVD Advisory