CVE-2025-1809

CVE-2025-1809 is a critical SQL injection vulnerability in Pixsoft Sol versions up to 7.6.6c, specifically affecting the login endpoint's "txtUsuario" argument. This allows unauthenticated remote attackers to inject malicious SQL queries, potentially leading to data compromise. The vulnerability has a CVSS score of 7.3 (HIGH), indicating a low attack complexity and no user interaction required, with potential impacts on confidentiality, integrity, and availability. The exploit has been publicly disclosed, but there is no evidence of active exploitation, nor are there readily available exploits in common frameworks like Metasploit or Nuclei. Despite public disclosure, there is minimal community discussion or media coverage surrounding this vulnerability, and the vendor has not responded to disclosure attempts. Organizations using affected Pixsoft Sol versions should prioritize patching or implementing mitigating controls.