CVE-2021-3604: Primion-Digitek Secure 8

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Secure 8 (Evalos) does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database.

Affected products

Published 2021-06-18. Last modified 2026-06-17.