Direct Inward Dialing: +1 408 916 9892
| Vulnerability details | |
| Severity | High |
| CVE ID | CVE-2026-12062 |
| Affected Software Version(s) | All ADAudit Plus builds below 8703 |
| Fixed Version | Build 8703 |
| Fixed on | June 12, 2026 |
An SQL injection vulnerability in ADAudit Plus Reports API has been fixed.
This vulnerability could allow an authenticated adversary to execute arbitrary SQL queries and access database records through a vulnerable request.
Update your ADAudit Plus instance to the latest version — 8703 — using the service pack.
This issue was reported by minhgalaxy at bl4ckh0l3 team from GalaxyOne.
Please contact support@adauditplus.com for more details.
