CVE-2025-57529

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

<1%p45

Published

Feb 3, 2026 (Feb 3, 2026)

Modified

Jun 17, 2026

Description

YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could lead to unauthorized data access

Vendors: youdatasum
Products: cpas audit management system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.