CVE-2026-36989

EUVD-2026-77110
A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mitreCNA
5.8 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
luxsoftluxcal_web_calendar
𝑥
≤ 5.3.4L
CNA
Common Weakness Enumeration
References
https://gist.github.com/mathysEthical/8c3c426e89c6e48911acf8513fd1f075
https://mathys.reboux.pro/CVE/2026/36989/