CVE-2026-5801

CriticalCVSS 9.8

Published: 10/07/2026(UTC)Updated: 10/07/2026(UTC)Translated: 11/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Summary

An SQL injection vulnerability in SEM-PMP by Semtek Informatics Software Consulting Trade Ltd. Co. allows command line execution through SQL injection. The issue affects versions up to 23042026.

Risk Assessment

An attacker can exploit this vulnerability to execute arbitrary commands on the server, leading to full system compromise, data theft, or service disruption.

Recommendation

Immediately update SEM-PMP to the latest version available from the vendor and implement parameterized SQL queries to prevent injection.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Semtek Informatics Software Consulting Trade Ltd. Co. SEM-PMP allows Command Line Execution through SQL Injection. This issue affects SEM-PMP: through 23042026.