CVE-2026-5955

CriticalCVSS 9.8

Published: 09/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

35th percentile - higher than 35% of all known CVEs

Summary

An SQL injection vulnerability was found in BiEticaret by Inrove Software and Internet Services due to improper neutralization of special elements in SQL commands. This allows an attacker to execute arbitrary SQL queries on the database.

Risk Assessment

An attacker can gain unauthorized access to sensitive data such as customer records, passwords, or financial information, and potentially take control of the application.

Recommendation

Immediately update BiEticaret to version 3.3.57 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This issue affects BiEticaret: before v3.3.57.