An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Dec 15, 2025 · NIST NVD

   Detected

   An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, where the API call code was updated to ensure safe handling of input values.

2. Oct 14, 2026 · NIST NVD

   Updated

   An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, where the API call code was updated to ensure safe handling of input values.

Affected

• cpe sunbirddcim/power iq9.2.0

Sources

• CVE.orgVulnerability recordCVE-2025-55703

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-55703

  30-day exploitation probability 0.1%

  first.org
• NIST NVDVulnerability recordCVE-2025-55703

  An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ v

  nvd.nist.gov

References

• Third Party Advisory · pastebin.com
• Product · sunbirddcim.com