CVE-2025-7636CWE-89

SQLi in Ergosis Security Systems' ZEUS PDKS

High · published February 10, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

⚡ Get ready to patch those databases! An SQL injection vulnerability in Ergosis Security Systems' ZEUS PDKS could let attackers manipulate the database just by sending a sneaky command. 💻 Think of it like a restaurant where a diner can slip in a note to the chef to change their entire order — without anyone checking to see if the request is legitimate. In this case, the dinner is your data, and it could be served up however the attacker desires! An attacker exploiting this vulnerability can execute arbitrary SQL commands, potentially accessing sensitive data, modifying records, or even deleting entire tables. Imagine them walking into the kitchen and making themselves the head chef! This could lead to absolutely devastating data breaches or loss of critical information.

Put simply

Think of it like a restaurant where a diner can slip in a note to the chef to change their entire order — without anyone checking to see if the request is legitimate. In this case, the dinner is your data, and it could be served up however the attacker desires! The vulnerability arises from improper neutralization of special elements in SQL commands, allowing attackers to execute malicious SQL queries through user inputs in the ZEUS PDKS application.

What to do

An attacker exploiting this vulnerability can execute arbitrary SQL commands, potentially accessing sensitive data, modifying records, or even deleting entire tables. Imagine them walking into the kitchen and making themselves the head chef! This could lead to absolutely devastating data breaches or loss of critical information. To protect yourself, update ZEUS PDKS to version 10022026 or later immediately. Additionally, ensure that all user inputs are properly sanitized and consider implementing prepared statements to safeguard against future SQL injection attacks. You’ve got this! Follow these steps and you'll be well on your way to securing your data like a pro! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00302 · 21.7th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-02-10T14:30Z
EPSS history
Timeline
  • 10 FEB 14:30Z
    SQLi in Ergosis Security Systems' ZEUS PDKS
    cvelistv5