Paper/Archive/CVE-2026-7188

CVE-2026-7188

Armiya Information Technologies Ltd. Co. Access Control System — SQLi in Armiya Information Technologies' Access Control System

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 40.5.405 × 208.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2.

Affected

ProductAffectedFixed inSource

Access Control System< Versiyon 2Versiyon 2CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1061