CVE-2026-4978

CriticalCVSS 9.8

Published: 30/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in UMAI Vision Traffic Analysis System allows an attacker to manipulate database queries due to improper neutralization of special elements in an SQL command. The issue affects versions from 30 before 34.

Risk Assessment

An attacker can gain unauthorized access to analytical data, modify or delete it, threatening the confidentiality and integrity of the traffic monitoring system.

Recommendation

It is recommended to upgrade to version 34 or later, which includes a fix for the vulnerability.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34.