What is the CVSS score of CVE-2025-68881?

CVE-2025-68881 has a CVSS 3.1 base score of 8.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of Saad Iqbal AppExperts are affected by CVE-2025-68881?

A critical SQL injection vulnerability exists in AppExperts versions 1.4.5 and earlier that could allow attackers to access, modify, or delete sensitive database information.

How to fix or mitigate CVE-2025-68881?

Within 24 hours: Inventory all systems running AppExperts and assess data sensitivity; implement network-level access controls to restrict AppExperts availability. Within 7 days: Deploy WAF rules to block SQL injection patterns targeting AppExperts; consider disabling non-critical AppExperts features if feasible. Within 30 days: Evaluate migration to alternative solutions or negotiate expedited patch release with vendor; conduct database activity monitoring and access log review for signs of exploitation.

Saad Iqbal AppExperts CVE-2025-68881

HIGH

SQL Injection (CWE-89)

2026-01-22 audit@patchstack.com

SQLi

8.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.5 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 22, 2026 - 17:16 nvd

HIGH 8.5

DescriptionCVE.org

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal AppExperts appexperts allows SQL Injection.This issue affects AppExperts: from n/a through <= 1.4.5.

AnalysisAI

Technical ContextAI

Classified as CWE-89 (SQL Injection). Affects Saad Iqbal AppExperts appexperts. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal AppExperts appexperts allows SQL Injection.This issue affects AppExperts: from n/a through <= 1.4.5.

Affected ProductsAI

Product: Saad Iqbal AppExperts appexperts.

RemediationAI

Monitor vendor advisories for a patch. Use parameterized queries. Implement input validation. Restrict network access to the affected service where possible.