CVE-2022-39056: Changingtec Rava Certificate Validation System

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database.

Affected products

• Changingtec Rava Certificate Validation System: version 3 only

Published 2022-10-18. Last modified 2026-06-17.