CVE-2026-8297

CriticalCVSS 9.8

Published: 17/07/2026(UTC)Updated: 17/07/2026(UTC)Translated: 18/07/2026(UTC)NVD NIST

Summary

An SQL injection vulnerability has been discovered in GisLab Laboratory Management System due to improper neutralization of special elements in SQL commands. The flaw affects versions from 1.4.03 through 08072026.

Risk Assessment

An attacker can exploit this vulnerability to gain unauthorized access to the database, steal or modify sensitive laboratory data, potentially compromising the confidentiality and integrity of the system.

Recommendation

Immediately update GisLab Laboratory Management System to the latest available version that includes a fix for the SQL injection vulnerability.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 through 08072026.