CVE-2026-12718

9.8 Critique

Publiée le 22/09/2026 à 16:17 · Modifiée le 22/09/2026 à 21:07 · Analyse NVD reportée · Source : iletisim@usom.gov.tr

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Karel Electronic Industry and Trade Inc. KarelIPS allows Blind SQL Injection. This issue affects KarelIPS: through 22092026. NOTE: The vendor was contacted and it was learned that the product is not supported.

Traduire en français

Produits concernés

Karel Electronic Industry and Trade Inc. KarelIPS

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	iletisim@usom.gov.tr	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-89

Références

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1146

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories