Which versions of Guardian Language-System are affected by CVE-2026-34102?

Guardian Language-System contains an authenticated SQL injection vulnerability (CVSS 8.7) with publicly available exploit code that allows low-privileged users to read and modify the entire…

Is there a public PoC exploit available for CVE-2026-34102?

Yes, a public proof-of-concept exploit is available for CVE-2026-34102. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2026-34102?

Within 24 hours: identify all Guardian Language-System instances in production and document running versions; restrict network access to the application where technically feasible; disable or revoke low-privilege user accounts not essential to operations. Within 7 days: deploy Web Application Firewall rules targeting SQL injection patterns in the `id` parameter of `job_info_get.php`; enforce database user permissions limiting read-write scope; enable detailed query logging on all database servers. Within 30 days: engage vendor or internal development to replace vulnerable string concatenation with parameterized queries and prepared statements in `job_info_get.php`; conduct comprehensive security code review of user input handling throughout Guardian Language-System; prepare and test deployment of patched version once vendor releases a fix.

Guardian Language-System CVE-2026-34102

Q: What is the CVSS score of CVE-2026-34102?

CVE-2026-34102 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-41059 HIGH

SQL Injection (CWE-89)

2026-07-01 VulnCheck

GHSA-j52p-8gcj-pq8j

PHP SQLi Guardian Language System

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-accessible SQL injection requiring low-privilege authentication; full database compromise possible; no scope change to systems outside the vulnerable application.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Aug 24, 2026 - 11:48 vuln.today

v3 (cvss_changed)

Analysis Updated

Aug 24, 2026 - 11:47 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 24, 2026 - 11:22 vuln.today

cvss_changed

Severity Changed

Aug 24, 2026 - 11:22 NVD

CRITICAL HIGH

CVSS changed

Aug 24, 2026 - 11:22 NVD

9.3 (CRITICAL) 8.7 (HIGH)

Analysis Generated

Jul 01, 2026 - 16:53 vuln.today

DescriptionCVE.org

Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info_get.php (line 16): SELECT * FROM jobs where input1 = '\".$_GET['id'].\"'. An authenticated attacker can perform error-based SQL injection to extract database contents.

AnalysisAI

Error-based SQL injection in Guardian Language-System exposes the full database to low-privileged authenticated attackers via the unsanitized id GET parameter in job_info_get.php. The vulnerable PHP code directly concatenates user input into a SQL query with no parameterization, and a public proof-of-concept exploit is available on GitHub. SSVC rates this as automatable with total technical impact, meaning successful exploitation grants complete read/write access to database contents including credentials and application data.

Technical ContextAI

The root cause is CWE-89 (Improper Neutralization of Special Elements in SQL Commands), arising from classic PHP string concatenation of unsanitized user input: SELECT * FROM jobs where input1 = '".$_GET['id']."' at line 16 of job_info_get.php. The affected product is the Guardian Language-System PHP web application (CPE: cpe:2.3:a:guardian:language-system:*:*:*:*:*:*:*:*). The application fails to use parameterized queries or prepared statements, allowing an attacker to inject arbitrary SQL syntax through the id GET parameter to trigger database error responses that leak schema and data. Error-based injection techniques (e.g., using EXTRACTVALUE() or UPDATEXML() in MySQL) enable systematic database enumeration without blind timing channels.

RemediationAI

No vendor-released patched version has been independently confirmed; the affected version boundary is defined only by a git commit hash (e42c395ec4b03fe62973a669c9209a673838b8a4) rather than a tagged release, so upgrade availability should be verified directly with the Guardian project maintainers. The primary fix is to replace the direct string concatenation in job_info_get.php at line 16 with a parameterized prepared statement (e.g., PDO with bindParam or mysqli_prepare), which eliminates the injection surface entirely. As an immediate compensating control, deploy a Web Application Firewall rule to block SQL metacharacters (single quotes, double dashes, semicolons) in the id parameter - note this may cause false positives for legitimate IDs containing special characters. Additionally, restrict access to job_info_get.php to only authenticated roles that genuinely require it, reducing the attack surface to the minimum necessary. References: VulnCheck advisory (https://www.vulncheck.com/advisories/guardian-language-system-unauthenticated-sql-injection-via-id-parameter-in-job-info-get-php) and NVD (https://nvd.nist.gov/vuln/detail/CVE-2026-34102).