Is there a public PoC exploit available for CVE-2026-14737?

Yes, a public proof-of-concept exploit is available for CVE-2026-14737. Prioritise patching immediately. EPSS: 0.3%.

e-Face General Management Platform CVE-2026-14737

Q: What is the CVSS score of CVE-2026-14737?

CVE-2026-14737 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-41745 MEDIUM

SQL Injection (CWE-89)

2026-07-05 VulDB

GHSA-vj97-338f-28pp

SQLi E Face General Management Platform

5.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.2 HIGH

SQL injection against an authorization endpoint enables full database read (C:H); write impact is limited (I:L); AV:N and PR:N align with the CVSS 4.0 source vector indicating unauthenticated network exploitation.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 05, 2026 - 11:23 vuln.today

CVSS changed

Jul 05, 2026 - 11:22 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

DescriptionCVE.org

A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr.do. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

AnalysisAI

SQL injection in Hanwang e-Face General Management Platform 6.3.5.4 exposes the /sysAuthStr/querySysAuthStr.do endpoint to unauthenticated remote database manipulation via the unsanitized order parameter. The endpoint handles system authorization strings, meaning successful exploitation likely targets credential or access-control records - a high-sensitivity data class despite the vendor-assigned Low impact ratings. A public proof-of-concept is documented via VulDB (no CISA KEV listing at time of analysis); no EPSS score was provided in the source intelligence.

Technical ContextAI

The affected product is Hanwang e-Face General Management Platform version 6.3.5.4, a physical access control and biometric management system (CPE: cpe:2.3:a:hanwang:e-face_general_management_platform:*:*:*:*:*:*:*:*). The root cause is CWE-89 (Improper Neutralization of Special Elements in an SQL Command): the order parameter passed to /sysAuthStr/querySysAuthStr.do is interpolated directly into a SQL query without parameterization or allowlist validation. The endpoint name - querySysAuthStr - implies it retrieves system authorization strings, making this injection point particularly sensitive, as the underlying table likely stores access tokens, session credentials, or permission mappings for the access control platform.

RemediationAI

No vendor-released patch has been identified at time of analysis - source references include only VulDB submission URLs and a public exploit document, with no Hanwang advisory or patched release version. As immediate compensating controls: deploy WAF rules blocking SQL metacharacters (single quotes, UNION, ORDER BY injection patterns) in the order parameter of requests to /sysAuthStr/querySysAuthStr.do, noting that overly broad WAF rules may break legitimate sort functionality. If the platform is internet-facing, restrict access behind VPN or network ACLs to authorized management workstations only - this is the most effective control given AV:N exploitation. Enable database query logging and alert on anomalous ORDER BY clauses or UNION-based patterns against this endpoint. Contact Hanwang directly to request a patch. References: https://vuldb.com/cve/CVE-2026-14737 and https://vuldb.com/vuln/376320.