CVE Catalog

CVE-2026-1617

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Summary

An SQL injection vulnerability has been discovered in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama due to improper neutralization of special elements in SQL commands. The issue affects versions from 5.1.2 before 5.1.3.

Risk Assessment

An attacker can exploit this vulnerability to execute unauthorized SQL queries, potentially leading to data leakage, modification, or deletion in the logging system database.

Recommendation

Immediately update Turkhotspot 5651 Loglama to version 5.1.3 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection. This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS