CVE-2026-4104
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and Trade Ltd. Co. TeknoPass allows SQL Injection. This issue affects TeknoPass from 20210501 through 20260429.
Risk Assessment
The risk includes unauthorized database access, data theft, modification or deletion, and potential application takeover.
Recommendation
Immediately update TeknoPass to a version later than 20260429 that contains the fix, and use parameterized SQL queries to prevent SQL injection.
Original NVD description (English source)
Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and Trade Ltd. Co. TeknoPass allows SQL Injection. This issue affects TeknoPass: from 20210501 through 20260429.