CVE-2026-12718

CRITICO 9.8CVE-2026-12718 · Published 22/09/2026 · updated 22/09/2026

In breve

CVE-2026-12718 è una vulnerabilità CRITICO (CVSS 9.8).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.47%, superiore al 40.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Karel Electronic Industry and Trade Inc. KarelIPS allows Blind SQL Injection. This issue affects KarelIPS: through 22092026. NOTE: The vendor was contacted and it was learned that the product is not supported.

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1146

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free