Is CVE-2026-44923 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-44923 being exploited in the wild.

How severe is CVE-2026-44923?

Informational severity, published 20 May 2026.

Which products and versions are affected?

Veritas InfoScale Operations Manager Before v9.1.3.

Is there a fix for CVE-2026-44923?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-44923 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-44923?

Check whether you run Veritas InfoScale Operations Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-44923: Veritas InfoScale VIOM SQL injection privilege escalation

CVE-2026-44923 · Severity: info · Published 2026-05-20

Veritas InfoScale Operations Manager (VIOM), a tool used for managing complex data center storage and server environments, contains a security vulnerability. An attacker can exploit this flaw to gain higher levels of access than they should have, potentially allowing them to view or modify sensitive management data. This could lead to unauthorized changes in the IT infrastructure or data exposure.

Technologies: Veritas InfoScale Operations Manager. Vendors: Veritas.

Quick answers

Is CVE-2026-44923 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-44923 being exploited in the wild.
How severe is CVE-2026-44923?: Informational severity, published 20 May 2026.
Which products and versions are affected?: Veritas InfoScale Operations Manager Before v9.1.3.
Is there a fix for CVE-2026-44923?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-44923 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-44923?: Check whether you run Veritas InfoScale Operations Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A SQL injection vulnerability exists in the web management interface of Veritas InfoScale Operations Manager (VIOM) in versions prior to 9.1.3. The flaw allows a remote attacker to inject malicious SQL commands into database queries. By exploiting this vulnerability, an attacker can bypass authentication or escalate their privileges within the application. This could lead to unauthorized access to the underlying database and full administrative control over the VIOM instance. Users are advised to upgrade to version 9.1.3 or later to remediate this issue.

Affected products

Veritas InfoScale Operations Manager (VIOM) Before v9.1.3

Timeline

2026-05-20: disclosed
2026-05-20: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.