A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. It has been declared as critical. This impacts an unknown function of the file /OperateStatistic.do. The manipulation of the argument VehicleID results in sql injection.
This vulnerability is reported as CVE-2026-4955. The attack can be launched remotely. Moreover, an exploit is present.
The vendor was contacted early about this disclosure but did not respond in any way.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-4955 | Shenzhen Ruiming Technology Streamax Crocus 1.3.44 /OperateStatistic.do VehicleID sql injection
A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44. It has been declared as critical. This impacts an unknown function of the file /OperateStatistic.do. The manipulation of the argument VehicleID results in sql…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR