Descor Infocad FM

• CVE-2025-26852 Critical 10.0 DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection. 0.4%
• CVE-2025-26853 Critical 10.0 DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema. 0.4%