Which versions of Borg SPM 2007 are affected by CVE-2026-6887?

Borg SPM 2007, an end-of-life business management system, contains a critical unauthenticated SQL injection vulnerability (CVSS 9.3) that permits remote attackers to compromise the entire database…

How to fix or mitigate CVE-2026-6887?

Within 24 hours: Inventory all systems running Borg SPM 2007 and isolate them from production networks or external connectivity; disable remote access if operationally feasible. Within 7 days: Conduct a forensic audit of database access logs and network traffic to detect compromise; if evidence of exploitation exists, initiate incident response and notify stakeholders. Within 30 days: Execute a formal migration plan to replace Borg SPM 2007 with a supported alternative; if replacement is not immediately possible, implement network segmentation, WAF rules to block SQL injection patterns, and multi-factor authentication on all database administrative accounts.

Borg SPM 2007 CVE-2026-6887

Q: What is the CVSS score of CVE-2026-6887?

CVE-2026-6887 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-25213 CRITICAL

SQL Injection (CWE-89)

2026-04-23 twcert

SQLi Borg Spm 2007 Borg Technology Corporation

9.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 24, 2026 - 14:52 vuln.today

cvss_changed

Analysis Generated

Apr 23, 2026 - 10:30 vuln.today

CVSS changed

Apr 23, 2026 - 10:22 NVD

9.8 (CRITICAL) 9.3 (CRITICAL)

EUVD ID Assigned

Apr 23, 2026 - 10:00 euvd

EUVD-2026-25213

Analysis Generated

Apr 23, 2026 - 10:00 vuln.today

CVE Published

Apr 23, 2026 - 09:30 nvd

CRITICAL 9.3

DescriptionCVE.org

Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

AnalysisAI

SQL injection in Borg SPM 2007 allows unauthenticated remote attackers to execute arbitrary SQL commands via network requests, enabling complete database compromise including read, modify, and delete operations. This legacy product (sales ended 2008) receives a critical CVSS 9.3 score with network vector, low complexity, and no authentication required. Taiwan CERT issued advisories identifying this as a SQL injection vulnerability affecting an end-of-life business management system, though no active exploitation evidence (KEV) or public exploit code has been identified at time of analysis.

Technical ContextAI

This vulnerability stems from CWE-89 (SQL Injection), a flaw where user-controllable input is incorporated into SQL queries without proper sanitization or parameterization. The affected product, Borg SPM 2007 developed by BorG Technology Corporation, is a sales and production management system that reached end-of-sale in 2008, making it approximately 18 years past its commercial lifecycle. SQL injection occurs when the application fails to validate or escape user input before constructing database queries, allowing attackers to break out of intended query logic and execute arbitrary SQL statements against the backend database. The CPE identifier cpe:2.3:a:borg_technology_corporation:borg_spm_2007 confirms this affects the legacy SPM 2007 product line across all identified versions.

RemediationAI

No vendor-released patch identified at time of analysis due to the product's end-of-life status (sales ended 2008). Primary recommendation is immediate migration to a supported, modern sales and production management system with active security maintenance. Organizations unable to migrate immediately should implement compensating controls: deploy a web application firewall (WAF) with SQL injection detection rules tuned to block common SQLi patterns in HTTP requests to Borg SPM 2007 endpoints, noting this adds latency and requires ongoing rule maintenance; restrict network access to the application to trusted IP ranges only via firewall rules, eliminating internet exposure while requiring VPN access for legitimate users; place the application and database behind a reverse proxy that enforces input validation and rate limiting; monitor database query logs for anomalous patterns indicating injection attempts. Each mitigation carries trade-offs: WAF adds complexity and false positive risk, network restrictions reduce accessibility, input validation at proxy may break legitimate functionality. Consult TWCERT advisories at https://www.twcert.org.tw/en/cp-139-10863-2f48e-2.html for additional guidance specific to Taiwan regulatory requirements.