CVE-2026-4321
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A SQL injection vulnerability has been discovered in Destekz by Raera - Ankara Web Design and Digital Advertising Agency, due to improper neutralization of special elements in SQL commands. This flaw allows an attacker to execute arbitrary SQL queries on the database.
Risk Assessment
An attacker can gain unauthorized access to sensitive data, modify or delete it, potentially compromising the confidentiality and integrity of the organization's data.
Recommendation
Immediately stop using the Destekz product, as the vendor does not support it and will not release patches. Consider migrating to an alternative, supported solution.
Original NVD description (English source)
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency Destekz allows SQL Injection. This issue affects Destekz: through 02062026. NOTE: The vendor was contacted and it was learned that the product is not supported.