CVE-2026-84813

Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.

Published Sep 3, 2026
CVSS 9.3 critical
0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

Paolo GeoDirectory

CVE-2026-84813 at the National Vulnerability Database