CVE-2025-56699

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-16 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in the cmd component of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows an unauthenticated user to execute arbitrary SQL commands via the sender parameter.

References

https://basedigitale.com/integrated-security-solutions/security-asset-management/centrax/
https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2025-56699

Get alerted when CVE-2025-56699 or the next vulnerability affects your stack