CVE-2023-26784: Tosec Kirin Fortress Machine

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter.

Affected products

• Tosec Kirin Fortress Machine: version 1.7-2020-0610 only

Published 2023-03-16. Last modified 2026-06-17.