CVE-2026-63314 — SQL Injection in WebCTI
WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated atta…
Published: 2026-10-15 · CVSS: 8.7 · CVSS 4.0
WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7