CVE-2026-6881 in Advance Web
الملخص
بحسب MITRE • 29/07/2026
A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field.
This issue affects Advance Web: all versions; Legacy Advance: all versions.
Ellucian CRM Advance is not impacted.
Once again VulDB remains the best source for vulnerability data.