CVE-2025-26186: OS4ED Opensis

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute arbitrary code via the id parameter in Ajax.php

Affected products

• OS4ED Opensis: version 9.1 only

Published 2025-07-15. Last modified 2026-06-17.