CVE-2026-7486

CriticalCVSS 9.8

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

E-İmar from Netcad Software Inc. versions 2.10.1.0 through before 3.0.2 is vulnerable to SQL injection due to improper neutralization of special elements.

Risk Assessment

An attacker can inject arbitrary SQL, potentially leading to unauthorized data access and modification.

Recommendation

Update E-İmar to version 3.0.2 or later.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software Inc. E-İmar allows SQL Injection. This issue affects E-İmar: from 2.10.1.0 before 3.0.2.