CVE-2026-5490

What it is

DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4568 by default. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. . Was ZDI-CAN-28726.

At a glance

Exploitability

Can be exploited over the network with a low-privilege account. High risk of data exposure, data tampering, service disruption.

Exploit odds

0.7% chance of exploitation in the next 30 days (EPSS).

Fix

No patch or advisory is linked yet. Look at mitigations or restrict exposure.

Timeline

1. 2026-07-29 20:17 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-07-31 04:17 UTC Last updatedMost recent change to the record

Details

Published

2026-07-29 20:17 UTC

Last modified

2026-07-31 04:17 UTC

Exploit probability

0.7% · EPSS, next 30 days

Weakness

CWE-89 · SQL injection

Record status

Deferred

Attack profile CVSS 3.0 · 8.8

Attack vector

Network

Complexity

Low

Privileges needed

Low

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High