6.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-1050

CVE-2026-1050: risesoft-y9 Digital-Infrastructure has a SQL injection vulnerability

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-1050

CVE-2026-1050:

6.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
net.risesoft:risenet-y9boot-support-platform-service	maven	<= 9.7.0-M5

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the vulnerability is based on the detailed information provided in the GitHub issue #2 for the risesoft-y9/Digital-Infrastructure repository. The issue report clearly identifies the root cause of the SQL injection vulnerability within the net.risesoft.util.Y9PlatformUtil.getTenantByLoginName function. The vulnerability stems from the unsafe concatenation of the loginName parameter into a SQL query string. The report also pinpoints the entry point of the vulnerability in the net.risesoft.api.v0.org.AuthenticateApiImpl.authenticate3 function, which takes user input and passes it to the vulnerable function. Although no patch is available, the provided code snippets from the issue serve as strong evidence for identifying the vulnerable functions.

Vulnerable functions

net.risesoft.util.Y9PlatformUtil.getTenantByLoginName

source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java

The function is vulnerable to SQL injection because it directly concatenates the user-provided 'loginName' into a SQL query without any sanitization or use of prepared statements. This allows an attacker to manipulate the query to execute arbitrary SQL commands.

net.risesoft.api.v0.org.AuthenticateApiImpl.authenticate3

source-code/src/main/java/net/risesoft/api/v0/org/AuthenticateApiImpl.java

This function serves as an entry point for the SQL injection vulnerability. It receives the 'tenantShortName' from a user request and passes it directly to the vulnerable 'getTenantByLoginName' function, which then executes the injected SQL.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.