CVE-2022-26245: Open-Falcon Falcon-Plus

Critical severity, CVSS 9.8. EPSS: 14.8% chance of exploitation in the next 30 days.

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.

Affected products

• Open-Falcon Falcon-Plus: version 0.3 only

Published 2022-03-27. Last modified 2026-06-17.