CVE-2025-57529: Youdatasum Cpas Audit Management System

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could lead to unauthorized data access

Affected products

• Youdatasum Cpas Audit Management System: up to and including 4.9

Published 2026-02-03. Last modified 2026-06-17.