Lyrie
Critical CVE
CVSS 9.83 sources verified·1 min read
By Lyrie Threat Intelligence·5/13/2026

CRITICAL: CVE-2016-9333 (CVSS 9.8) — moxa softcms

CVE: CVE-2016-9333

CVSS: 9.8 (3.0) — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: CRITICAL

Status: Critical advisory

Affected

  • moxa softcms

Summary

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input (SQL INJECTION).

Verified Sources

References

  • http://www.securityfocus.com/bid/94394
  • https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02
  • http://www.securityfocus.com/bid/94394
  • https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._

Lyrie Verdict

A vulnerability of this severity is exactly what Lyrie's anti-rogue-AI defense is built for: continuous, autonomous monitoring that doesn't wait for human reaction time.

Validated sources

  1. [1]NVD
  2. [2]GitHub Advisory
  3. [3]MITRE