CVE-2026-8025

תיאור (מקור, אנגלית)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information Technologies Ltd. CBS Platform allows SQL Injection. This issue affects CBS Platform: through 09062026.  NOTE: The vendor was contacted and it was learned that the product is not supported.

מדדים

CVSS 3.1

9.8 (CRITICAL) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-9/8/2026

CWE

CWE-89

קישורים

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0344