CVE-2025-10870 – SQL injection in DIAL’s CentrosNet

CVE ID : CVE-2025-10870

Published : Nov. 7, 2025, 9:26 a.m. | 3 minutes ago

Description : SQL injection vulnerability in DIAL’s CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete databases by sending POST and GET requests with the ‘ultralogin’ parameter in ‘/centrosnet/ultralogin.php’.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…