CVE-2025-62846 — An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands. — CVE Database · The Intelligence Room