CVE-2026-36989

MEDIUM NVD

CVSS Score 5.8

Severity MEDIUM

Published Sep 13, 2026

Vendor unknown

Description

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.