What’s Vulnerable › Vulnerabilities

CVE-2025-56401

• Severity: high (CVSS 7.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-11-24 · updated 2026-07-05
• Weakness: CWE-89

Description

ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName.

Affected products

• Ziragroup Wbrm: 7.0

References

• https://mstreet97.github.io/security/cve/sqli/2025/07/25/Zira-WBRM-SQL-Injection-CVE-2025-56401.html

Get alerted when CVE-2025-56401 or the next vulnerability affects your stack