CVE-2026-7188CWE-89sql-injection

CVE-2026-7188

Critical · published September 10, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection.

This issue affects Access Control System: before Versiyon 2.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-09-10T12:16Z
References (1)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1061 · [email protected]
EPSS history
Timeline
  • 11 SEP 03:19Z
    EPSS moved — → 0%
    epss
  • 10 SEP 07:49Z
    SQLi in Armiya Information Technologies' Access Control System
    cvelistv5