CVE-2024-44065: Magicbug Cloudlog

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.

Affected products

• Magicbug Cloudlog: version 2.6.15 only

Published 2025-12-26. Last modified 2026-06-17.