Authenticated Second Order SQL Injection Vulnerability (CVE-2026-76981) fixed in ADAudit Plus build 8711

Details

CVE-2026-76981 refers to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module. This issue has been fixed.

Impact

This vulnerability could allow an authenticated attacker to execute arbitrary SQL queries, resulting in loss of data integrity.

Steps to update:

Update your ADAudit Plus instance to the latest version — 8711 — using the service pack.

Acknowledgements

This issue was reported by nicecatch2000.

Please contact support@adauditplus.com for more details.