CVE-2026-8025

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information Technologies Ltd. CBS Platform allows SQL Injection. This issue affects CBS Platform: through 09062026. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0344

Configurations

No configuration.

History

23 Jul 2026, 08:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL ('inyección SQL') en MOSK Information Technologies Ltd. CBS Platform permite la inyección SQL. Este problema afecta a CBS Platform: hasta el 09062026. NOTA: Se contactó al proveedor y se supo que el producto no tiene soporte.

09 Jun 2026, 16:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-09 16:16

Updated : 2026-07-23 08:10

NVD link : CVE-2026-8025

Mitre link : CVE-2026-8025

CVE.ORG link : CVE-2026-8025

JSON object : View

Products Affected

No product.

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2026-8025", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "iletisim@usom.gov.tr"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8025", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-09T15:37:28.064514Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "MOSK Information Technologies Ltd.", "product": "CBS Platform", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "09062026"}], "defaultStatus": "unknown"}]}], "published": "2026-06-09T16:16:44.320", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0344", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information Technologies Ltd. CBS Platform allows SQL Injection.\n\nThis issue affects CBS Platform: through 09062026.\u00a0\u00a0NOTE: The vendor was contacted and it was learned that the product is not supported."}, {"lang": "es", "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando SQL ('inyecci\u00f3n SQL') en MOSK Information Technologies Ltd. CBS Platform permite la inyecci\u00f3n SQL.\n\nEste problema afecta a CBS Platform: hasta el 09062026. NOTA: Se contact\u00f3 al proveedor y se supo que el producto no tiene soporte."}], "lastModified": "2026-07-23T08:10:00.137", "sourceIdentifier": "iletisim@usom.gov.tr"}