CVE-2021-47801: Vianeos Octopus

High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Vianeos OctoPUS 5 contains a time-based blind SQL injection vulnerability in the 'login_user' parameter during authentication requests. Attackers can exploit this vulnerability by crafting malicious POST requests with specially constructed SQL payloads that trigger database sleep functions to extract information.

Affected products

• Vianeos Vianeos Octopus: after V5

Published 2026-01-16. Last modified 2026-06-17.