Nemon Trade Energy
Approved changes feed: RSS · Atom
cpe:2.3:a:nemon:nemon_trade_energy:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nemon (c8823282-22ae-5d5f-8580-e3ab5d8fe371) |
|---|---|
| Product | Nemon Trade Energy (781f2cca-fb2d-5c27-9bdf-9e5b0a61e02d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-10731 |
vulnerable | 2026-07-29 00:23:30.267516 |
SQL injection in Nemon products
SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. The two-factor authentication (2FA) functionality can be accessed without prior authentication, allowing unauthenticated attackers to execute arbitrary SQL queries on the backend database. A successful exploit could lead to database enumeration, the unauthorised creation of privileged users, the modification or deletion of critical information, and denial-of-service conditions.
Published: 2026-06-09T08:57:54.739Z
Updated: 2026-06-09T14:12:27.775Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.