CVE-2025-26746

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Apr 15, 2025
Updated: Apr 16, 2025
CWE ID 79

Summary

CVE-2025-26908 is a vulnerability affecting Gurmehub Kargo Entegratör, where SQL Injection is possible due to improper neutralization of special elements used in SQL commands. This issue exposes the system to potential attackers who can manipulate SQL statements and gain unauthorized access to sensitive data. The vulnerability spans from version n/a to 1.1.14. Organizations using this software are advised to apply the necessary patches or upgrades to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share