CVE-2026-21856
High
Description
The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, a time based blind SQL injection vulnerability in the webhook edit and scanner api endpoints that allow an authenticated attacker to execute arbitrary SQL queries against the MySQL database. Commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8 contains a patch.
SeverityHigh
CVSS7.2
Exploit probability—
ProductTarkov Data Manager
PublishedJan 7, 2026
First seenJan 7, 2026
Weakness typeCWE-89SQL injection
How to fix
Update
- tarkov tarkov_data_manager2026-01-02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tarkov tarkov_data_manager | v < 2026-01-02 | 2026-01-02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.