cbcvebase.
CVE-2026-32499
published 2026-03-25

CVE-2026-32499: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL…

PriorityP179critical9.3CVSS 3.1
AVNACLPRNUINSCCHINAL
ITWVulnCheck KEV
Exploited in the wild
EPSS
0.28%
20.0th percentile
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects ChatBot: from n/a through <= 7.7.9.

Affected

1 ranges
VendorProductVersion rangeFixed in
quantumcloudchatbotn/a – <= 7.7.9—

CVSS provenance

nvdv3.19.3CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
vulncheck9.3CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.