This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-3022 | BDVDB-2026-320701 Detail

WakymaWakyma application web

Description#

Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting special NoSQL commands, resulting in the attacker being able to obtain customer reports.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-943 Improper Neutralization of Special Elements in Data Query Logic

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.