Security Advisory
CVE-2026-52470
9.8
CRITICAL
Vulnerability Description
SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file
Published Date
July 21, 2026
Official Source
NIST NVD Advisory