TOOOLS iSquad

6 known vulnerabilities in TOOOLS iSquad, 4 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-81677 CVSS 8.8 high The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of the GET parameter `id_ambito`. An…
  • CVE-2026-81676 CVSS 8.8 high A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the `limit_videos` parameter is directly concatenated into a MariaDB…
  • CVE-2026-81675 CVSS 9.3 critical The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the id_seccion parameter. The parameter is…
  • CVE-2026-81674 CVSS 9.3 critical The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly…
  • CVE-2026-81673 CVSS 9.3 critical The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The application does…
  • CVE-2026-81672 CVSS 9.3 critical SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id_video parameter. The…