CVE-2024-6917

CRITICAL 9.8CVE-2024-6917 · Published 12/08/2024 · updated 17/06/2026

In short

CVE-2024-6917 is a CRITICAL (CVSS 9.8) vulnerability affecting order management (veribase).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.7% of all vulnerabilities.
Fix: update to 4.010.2 or later.

Package	Affected versions	Patched versions
order management veribase	`< 4.010.2`	`4.010.2`

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2.

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1105
usom.gov.tr/bildirim/tr-24-1105 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free