CVE-2026-75498Proof of concept (PoC) published · CISA
Webkul QloApps SQL injection
CVSS score
7.2
EPSS probability
%0.8
Risk score
0.1
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.2
CVE-2026-75496
Webkul QloApps improper file upload validation
W
Patch verifiedEPSS %1
7.2
CVE-2026-75497
Webkul QloApps SQL injection
W
Patch verifiedEPSS %1
8.6
CVE-2026-95655
Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel
W
Patch verifiedEPSS %0
8.2
CVE-2017-20262
SQL injection in Webkul Ajax Quiz
W
Patch status unknown Public Exploits:1EPSS %0
7.1
CVE-2026-93988
QloApps through 1.7.0 Arbitrary File Read via getEmailHTML
W
Patch verifiedEPSS %1
5.3
CVE-2026-75082
Webkul Bagisto Customer-Registration Notification Email register cross site scripting
W
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-75498"