CVE-2026-8025

CriticalCVSS 9.8

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

CBS Platform from MOSK Information Technologies Ltd. is vulnerable to SQL injection due to improper neutralization of special elements. The product is unsupported.

Risk Assessment

An attacker can inject arbitrary SQL, potentially leading to full database compromise and data breach.

Recommendation

As the product is unsupported, migrate to an alternative solution immediately.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information Technologies Ltd. CBS Platform allows SQL Injection. This issue affects CBS Platform: through 09062026. NOTE: The vendor was contacted and it was learned that the product is not supported.