What is the CVSS score of CVE-2026-27373?

CVE-2026-27373 has a CVSS 3.1 base score of 8.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of Essekia Tablesome are affected by CVE-2026-27373?

A critical SQL injection vulnerability in Essekia Tablesome (versions ≤1.2.3) exposes organizations to unauthorized database access and potential data exfiltration.

How to fix or mitigate CVE-2026-27373?

Within 24 hours: Inventory all systems running Tablesome and identify affected versions; isolate affected instances from production if possible. Within 7 days: Contact Essekia for patch timelines and interim security updates; implement WAF rules to block SQL injection patterns targeting Tablesome; apply input validation and parameterized query enforcement at the application layer. Within 30 days: Upgrade Tablesome to a patched version once available; conduct forensic review of database logs for unauthorized access attempts; implement database activity monitoring.

Essekia Tablesome CVE-2026-27373

HIGH

SQL Injection (CWE-89)

2026-03-05 audit@patchstack.com

SQLi

8.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.5 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 21:37 vuln.today

cvss_changed

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 05, 2026 - 06:16 nvd

HIGH 8.5

DescriptionCVE.org

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome tablesome allows Blind SQL Injection.This issue affects Tablesome: from n/a through <= 1.2.3.

AnalysisAI

Essekia Tablesome versions up to 1.2.3 contain a blind SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries through improper input sanitization. An attacker with valid credentials can exploit this to extract sensitive data from the database, though no patch is currently available. The vulnerability has a CVSS score of 8.5 and requires network access with low attack complexity.

Technical ContextAI

Classified as CWE-89 (SQL Injection). Affects Essekia Tablesome tablesome. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome tablesome allows Blind SQL Injection.This issue affects Tablesome: from n/a through <= 1.2.3.

Affected ProductsAI

Product: Essekia Tablesome tablesome.

RemediationAI

Monitor vendor advisories for a patch. Use parameterized queries. Implement input validation. Restrict network access to the affected service where possible.