by Kastro
Paper/Archive/CVE-2026-1617

CVE-2026-1617

Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama — SQLi in Turkmesh's Turkhotspot 5651 Loglama

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.5.405 × 208.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection. This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3.

Affected

ProductAffectedFixed inSource
Turkhotspot 5651 Loglama5.1.2 – < 5.1.35.1.3CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0584