{"id":"CVE-2026-78837","title":"A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement.","summary":"A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-89"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T19:17:47.563","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-78837","references":[{"url":"https://github.com/nabeelmkhan/CVE-2026-78837","label":"cve@mitre.org"},{"url":"https://packetstormsecurity.com","label":"cve@mitre.org"}],"tags":["nvd","cve.org","exploit-available"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-09T18:22:49.585644Z"},"epss":0.00425,"epssPercentile":0.34037,"exploits":{"github":1,"githubRepos":["https://github.com/nabeelmkhan/CVE-2026-78837"],"checkedAt":"2026-09-25T08:21:14.627Z"},"exploitAvailable":true,"ingestedAt":"2026-09-08T15:33:26.985Z","slug":"CVE-2026-78837","body":"## Overview\n\nA SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201946,"id":"CVE-2026-78837","ts":1789399993199,"field":"cvss","old":null,"new":"7.5"},{"seq":201945,"id":"CVE-2026-78837","ts":1789399993199,"field":"severity","old":"none","new":"high"},{"seq":200676,"id":"CVE-2026-78837","ts":1789397585333,"field":"cvss","old":"7.5","new":null},{"seq":200675,"id":"CVE-2026-78837","ts":1789397585333,"field":"severity","old":"high","new":"none"},{"seq":199383,"id":"CVE-2026-78837","ts":1789395475371,"field":"cvss","old":null,"new":"7.5"},{"seq":199382,"id":"CVE-2026-78837","ts":1789395475371,"field":"severity","old":"none","new":"high"},{"seq":198628,"id":"CVE-2026-78837","ts":1789392188066,"field":"cvss","old":"7.5","new":null},{"seq":198627,"id":"CVE-2026-78837","ts":1789392188066,"field":"severity","old":"high","new":"none"},{"seq":196959,"id":"CVE-2026-78837","ts":1789384273002,"field":"cvss","old":null,"new":"7.5"},{"seq":196958,"id":"CVE-2026-78837","ts":1789384273002,"field":"severity","old":"none","new":"high"},{"seq":194090,"id":"CVE-2026-78837","ts":1789378693709,"field":"cvss","old":"7.5","new":null},{"seq":194089,"id":"CVE-2026-78837","ts":1789378693709,"field":"severity","old":"high","new":"none"},{"seq":192877,"id":"CVE-2026-78837","ts":1789376494289,"field":"cvss","old":null,"new":"7.5"},{"seq":192876,"id":"CVE-2026-78837","ts":1789376494289,"field":"severity","old":"none","new":"high"},{"seq":191664,"id":"CVE-2026-78837","ts":1789373590254,"field":"cvss","old":"7.5","new":null},{"seq":191663,"id":"CVE-2026-78837","ts":1789373590254,"field":"severity","old":"high","new":"none"},{"seq":190449,"id":"CVE-2026-78837","ts":1789369449351,"field":"cvss","old":null,"new":"7.5"},{"seq":190448,"id":"CVE-2026-78837","ts":1789369449351,"field":"severity","old":"none","new":"high"},{"seq":189236,"id":"CVE-2026-78837","ts":1789368373285,"field":"cvss","old":"7.5","new":null},{"seq":189235,"id":"CVE-2026-78837","ts":1789368373285,"field":"severity","old":"high","new":"none"},{"seq":188019,"id":"CVE-2026-78837","ts":1789365211358,"field":"cvss","old":null,"new":"7.5"},{"seq":188018,"id":"CVE-2026-78837","ts":1789365211358,"field":"severity","old":"none","new":"high"},{"seq":186806,"id":"CVE-2026-78837","ts":1789363454825,"field":"cvss","old":"7.5","new":null},{"seq":186805,"id":"CVE-2026-78837","ts":1789363454825,"field":"severity","old":"high","new":"none"},{"seq":185592,"id":"CVE-2026-78837","ts":1789361195084,"field":"cvss","old":null,"new":"7.5"},{"seq":185591,"id":"CVE-2026-78837","ts":1789361195084,"field":"severity","old":"none","new":"high"},{"seq":184379,"id":"CVE-2026-78837","ts":1789358318810,"field":"cvss","old":"7.5","new":null},{"seq":184378,"id":"CVE-2026-78837","ts":1789358318810,"field":"severity","old":"high","new":"none"},{"seq":182630,"id":"CVE-2026-78837","ts":1789354302428,"field":"cvss","old":null,"new":"7.5"},{"seq":182629,"id":"CVE-2026-78837","ts":1789354302428,"field":"severity","old":"none","new":"high"},{"seq":181423,"id":"CVE-2026-78837","ts":1789353279942,"field":"cvss","old":"7.5","new":null},{"seq":181422,"id":"CVE-2026-78837","ts":1789353279942,"field":"severity","old":"high","new":"none"},{"seq":180216,"id":"CVE-2026-78837","ts":1789350265235,"field":"cvss","old":null,"new":"7.5"},{"seq":180215,"id":"CVE-2026-78837","ts":1789350265235,"field":"severity","old":"none","new":"high"},{"seq":179009,"id":"CVE-2026-78837","ts":1789348256897,"field":"cvss","old":"7.5","new":null},{"seq":179008,"id":"CVE-2026-78837","ts":1789348256897,"field":"severity","old":"high","new":"none"},{"seq":177802,"id":"CVE-2026-78837","ts":1789346355752,"field":"cvss","old":null,"new":"7.5"},{"seq":177801,"id":"CVE-2026-78837","ts":1789346355752,"field":"severity","old":"none","new":"high"},{"seq":176595,"id":"CVE-2026-78837","ts":1789343156646,"field":"cvss","old":"7.5","new":null},{"seq":176594,"id":"CVE-2026-78837","ts":1789343156646,"field":"severity","old":"high","new":"none"},{"seq":174712,"id":"CVE-2026-78837","ts":1789334852909,"field":"cvss","old":null,"new":"7.5"},{"seq":174711,"id":"CVE-2026-78837","ts":1789334852909,"field":"severity","old":"none","new":"high"},{"seq":173507,"id":"CVE-2026-78837","ts":1789333641108,"field":"cvss","old":"7.5","new":null},{"seq":173506,"id":"CVE-2026-78837","ts":1789333641108,"field":"severity","old":"high","new":"none"},{"seq":172321,"id":"CVE-2026-78837","ts":1789331080377,"field":"cvss","old":null,"new":"7.5"},{"seq":172320,"id":"CVE-2026-78837","ts":1789331080377,"field":"severity","old":"none","new":"high"},{"seq":171135,"id":"CVE-2026-78837","ts":1789328750671,"field":"cvss","old":"7.5","new":null},{"seq":171134,"id":"CVE-2026-78837","ts":1789328750671,"field":"severity","old":"high","new":"none"},{"seq":169930,"id":"CVE-2026-78837","ts":1789327144373,"field":"cvss","old":null,"new":"7.5"},{"seq":169929,"id":"CVE-2026-78837","ts":1789327144373,"field":"severity","old":"none","new":"high"}]}