Is there a public PoC exploit available for CVE-2026-9551?

Yes, a public proof-of-concept exploit is available for CVE-2026-9551. Prioritise patching immediately. EPSS: 0.0%.

Parking Management System CVE-2026-9551

Q: What is the CVSS score of CVE-2026-9551?

CVE-2026-9551 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-31827 MEDIUM

SQL Injection (CWE-89)

2026-05-26 VulDB

GHSA-2584-45j5-q8f5

SQLi Parking Management System

5.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 08, 2026 - 12:22 vuln.today

Severity Changed

May 26, 2026 - 15:22 NVD

HIGH MEDIUM

CVSS changed

May 26, 2026 - 15:22 NVD

7.3 (HIGH) 5.5 (MEDIUM)

DescriptionCVE.org

A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xp_cmdshell of the file ParkingRecord/ExportParkingRecords of the component API Endpoint. The manipulation of the argument Value leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

SQL injection via the xp_cmdshell-invoked export endpoint in Das Parking Management System 6.2.0 allows unauthenticated remote attackers to manipulate database queries through the Value parameter of the ParkingRecord/ExportParkingRecords API endpoint. The specific reference to xp_cmdshell - a Microsoft SQL Server extended stored procedure capable of executing operating system commands - elevates the potential impact beyond typical data-layer SQL injection if that procedure is enabled on the target SQL Server instance, making this more consequential than the CVSS 5.5 score alone suggests. A publicly available proof-of-concept exploit exists and the vendor has not responded to disclosure, leaving version 6.2.0 without a vendor-issued patch.

Technical ContextAI

The vulnerability resides in the ExportParkingRecords API endpoint (ParkingRecord/ExportParkingRecords) of Das Parking Management System 6.2.0, identified by CPE cpe:2.3:a:das:parking_management_system_停车场管理系统:*:*:*:*:*:*:*:*. CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) confirms the root cause as unsanitized user-supplied input in the Value parameter being passed directly into SQL query construction. The explicit mention of xp_cmdshell - a Microsoft SQL Server stored procedure used to execute shell commands - indicates the backend database is Microsoft SQL Server and that the injection point either calls or can reach this procedure. If xp_cmdshell is enabled on the SQL Server instance (it is disabled by default since SQL Server 2005 and requires explicit activation via sp_configure), successful injection could escalate from data exfiltration to operating system command execution running under the SQL Server service account's privilege context.

RemediationAI

No vendor-released patch is identified at time of analysis - the vendor did not respond to coordinated disclosure. As an immediate compensating control, restrict or disable network access to the ParkingRecord/ExportParkingRecords API endpoint using firewall rules or reverse-proxy access controls, directly eliminating the network attack vector (AV:N) at the cost of disabling legitimate export functionality for remote users. If the backend is Microsoft SQL Server, disable xp_cmdshell immediately by executing 'EXEC sp_configure "xp_cmdshell", 0; RECONFIGURE;' - this critical mitigation prevents OS-level command execution even if SQL injection is achieved, with no impact on standard parking record operations that do not rely on shell execution. Implement a web application firewall rule to detect and block SQL metacharacters (single quotes, comment sequences, UNION/SELECT keywords) in the Value parameter of this endpoint as a defense-in-depth layer. Monitor VulDB at https://vuldb.com/vuln/365610 for any future vendor patch announcement and prioritize application upon release.