CVE-2021-26795: Talariax Sendquick Alert Plus Server Admin

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management.

Affected products

• Talariax Sendquick Alert Plus Server Admin: before 4.3 (fixed in 4.3); version 4.3 only

Published 2021-11-14. Last modified 2026-06-17.