CVE-2026-36989

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.

  • Published Sep 13, 2026
  • CVSS 5.8 medium
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-36989 at the National Vulnerability Database