9.3
Critical
CVE-2026-32499 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects ChatBot: from n/a through <= 7.7.9.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ChatBot | Versions not published |
Other CVEs of ChatBot
The 8 CVEs of ChatBot →
CVE-2026-57363
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud…
7.1
High
CVE-2026-57362
Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions
7.1
High
CVE-2026-40788
Subscriber Broken Access Control in ChatBot <= 7.9.7 versions
7.1
High
CVE-2025-64277
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access…
5.3
Medium