CVE-2020-26546

An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone to SQL injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-89

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-26546
• https://excellium-services.com/cert-xlm-advisory/CVE-2020-26546/Third Party Advisory
• https://excellium-services.com/cert-xlm-advisory/CVE-2020-26546/Third Party Advisory

Published

Oct 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26538An issue was discovered in Foxit Reader and PhantomPDF befor…7.8
• CVE-2020-26539An issue was discovered in Foxit Reader and PhantomPDF befor…9.8
• CVE-2020-2654Vulnerability in the Java SE product of Oracle Java SE (comp…3.7
• CVE-2020-26540An issue was discovered in Foxit Reader and PhantomPDF befor…7.5
• CVE-2020-26541The Linux kernel through 5.8.13 does not properly enforce th…6.5
• CVE-2020-26542An issue was discovered in the MongoDB Simple LDAP plugin th…9.8
• CVE-2020-26547Monal before 4.9 does not implement proper sender verificati…9.8
• CVE-2020-26548An issue was discovered in Aviatrix Controller before R5.4.1…8.8
• CVE-2020-26549An issue was discovered in Aviatrix Controller before R5.4.1…7.5
• CVE-2020-2655Vulnerability in the Java SE product of Oracle Java SE (comp…4.8
• CVE-2020-26550An issue was discovered in Aviatrix Controller before R5.3.1…7.5
• CVE-2020-26551An issue was discovered in Aviatrix Controller before R5.3.1…7.5