Vianeos vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Vianeos products: 1 record(s), with severity, exploitation and fixes.

Vianeos OctoPUS 1

Exploited only (KEV) →

CVE-2021-47801 High · 8.2 CWE-89 Jan 15, 2026

Vianeos OctoPUS 5 - 'login_user' SQLi

Vianeos OctoPUS 5 contains a time-based blind SQL injection vulnerability in the 'login_user' parameter during authentication requests. Attackers can exploit this vulnerability by crafting malicious POST requests with specially constructed SQL payloads that trigger database sleep functions to extract information.