CVE-2026-4321CWE-89

SQLi in Raera's Destekz

Critical · published July 3, 2026

CVSS v3.1

9.8

EPSS

Percentile

39.6

In the wild

Unconfirmed

What it is

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency Destekz allows SQL Injection.

This issue affects Destekz: through 02062026. NOTE: The vendor was contacted and it was learned that the product is not supported.

The record

Technical detail

CVSS v3.1: 9.8 · CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00468 · 39.6th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2026-07-03T08:54Z

EPSS history

Timeline

03 JUL 08:54Z
SQLi in Raera's Destekz
cvelistv5