ispconfig3 vulnerabilities

1 known vulnerability in ispconfig3 from Ispconfig. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  ispconfig3: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-61518Aug 19, 2026Ispconfig

  ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The buil