CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2016-20096 — Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated S...

·Source: NIST NVD

Updated:

Executive Summary

Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name parameter in a POST request to the login endpoint. Attackers can inject malicious SQL through the login form and retrieve injected query results from a subsequent session request, enabling extraction of pl

Analysis

Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name parameter in a POST request to the login endpoint. Attackers can inject malicious SQL through the login form and retrieve injected query results from a subsequent session request, enabling extraction of plaintext credentials and other database content with DBA-level privileges. CVSS Score: 9.8. Published: 2026-07-21T19:17:07.357.

Indicators of Compromise (2)

CVE (1)
CVE-2016-20096
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 21, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

Critical SharePoint RCE flaw exploited to steal machine keys

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. [...]

CVE-2026-50522
BleepingComputer
MEDIUMVulnerability

How to Build Faster, More Scalable AI Applications with Elastic and NVIDIA

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/accelerate-vector-search-for-enterprise-scale-ai-elastic-nvidia-image_small-6-a-31975.jpg" align=right hspace=4><b>An OnDemand Webinar</b><br>AI applications are only as powerful as the infrastructure behind them. Discover how leading organizations are accelerating search, eliminating performance bottlenecks, and building AI appli

Bank Info Security
MEDIUMVulnerability

Cyberattack against Maine telecom disrupted municipal internet service in 23 towns

Colin Wood reports: At least one municipal government was among those to see their internet service disrupted after a cyberattack against a Maine telecommunications firm Sunday caused an outage affecting 23 towns along the state’s midcoastal region. A local NBC affiliate reported that the government office of Damariscotta, a tourist town of roughly 2,300 inhabitants, known for... Source

DataBreaches.net