CVE-2024-6919: Nac Nacpremium

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection. This issue affects NACPremium: through 01082024.

Affected products

• Nac Nacpremium: up to and including 2024-08-01

Published 2024-09-02. Last modified 2026-06-17.