Critical severity · published Jun 4, 2026
CVE-2025-71316
SQLite sqldiff remote code execution via argument injection
9.8
CVSS
0.5%
EPSS
No
On KEV
Description
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options. Fixed on or around 2025-12-26.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SQ
sqldiff · SQLite
before 2025-12-26 · source: vendor
RC
RUGGEDCOM CROSSBOW Station Access Controller (SAC) · Siemens
before V6.0 · source: CISA
In the news
VulnerabilityCritical
Siemens RUGGEDCOM CROSSBOW Station Access Controller
View CSAF
Summary
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.
The following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected:
RUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/<6.0 (CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824)
CVSS
Vendor
Equipment
v3 9.8
Siemens
RUGGEDCOM CROSSBOW Station Access Controller (SAC)
4 Vulnerabilities
Numeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encoding, Heap-based Buffer Overflow
Background
Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Germany
Vulnerabilities
Expand All +
CVE-2025-6965
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption iss...
Oct 22, 2026·CISA Advisories
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-71316
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-71316
i.blackhat.com
https://i.blackhat.com/EU-24/Presentations/EU-24-Tsai-V2-WorstFit-Unveiling-Hidden-Transformers-in-Windows-ANSI.pdf
learn.microsoft.com
https://learn.microsoft.com/en-us/windows/win32/api/processenv/nf-processenv-getcommandlinea#security-remarks
raw.githubusercontent.com
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-155-01.json
sqlite.org
https://sqlite.org/src/file/tool/winmain.c
www.cve.org
https://www.cve.org/CVERecord?id=CVE-2025-71316
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-765416.html