CVE-2018-2418

CVE-2018-2418 is a critical code injection vulnerability affecting all versions of the SAP MaxDB ODBC driver prior to 7.9.09.07. An unauthenticated attacker can remotely inject and execute arbitrary code, gaining full control over the application. This vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability with low attack complexity. While there is no known active exploitation or publicly available exploit code, the vulnerability has garnered significant community discussion, suggesting potential interest from threat actors.