CVE-2026-7188

CriticalCVSS 9.8

Published: 10/09/2026(UTC)Updated: 10/09/2026(UTC)Translated: 10/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

25th percentile - higher than 25% of all known CVEs

Summary

The Access Control System by Armiya Information Technologies Ltd. Co. contains an SQL injection vulnerability due to improper neutralization of special elements used in SQL commands. The issue affects versions before Versiyon 2.

Risk Assessment

An attacker can execute arbitrary SQL queries, potentially leading to data leakage, modification, or deletion. This can compromise the confidentiality and integrity of the access control system.

Recommendation

Update the Access Control System to Versiyon 2 or later. Additionally, verify that the application uses parameterized SQL queries.

Other vulnerabilities in Access Control System

CVE-2026-8323Critical
The Access Control System by Armiya Information Technologies Ltd. Co. contains an open redirect vulnerability to an untrusted site. The issue affects versions before Versiyon 2 and allows faking the source of data.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS