CVE-2022-50892

Critical · 9.8

CVSS

9.8

EPSS

0.7%

Published

Jan 13, 2026

CISA due date

—

The record

VIAVIWEB Wallpaper Admin 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating login credentials. Attackers can exploit the login page by injecting 'admin' or 1=1-- - payload to gain unauthorized access to the administrative interface.

Affected packages

Ecosystem	Package	Introduced	Fixed