CVE-2026-8307

CriticalCVSS 9.8

Published: 08/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

A SQL injection vulnerability was found in Webbeyaz Web Design Mediküm Web due to improper neutralization of special elements in SQL commands. This allows an attacker to execute arbitrary SQL queries on the database.

Risk Assessment

An attacker can gain unauthorized access to sensitive data, modify or delete it, compromising data confidentiality and integrity. The vendor no longer supports the product, increasing the risk.

Recommendation

Immediately stop using Mediküm Web and replace it with a supported solution. If not possible, isolate the system from the network and apply firewall rules blocking database access.

Original NVD description (English source)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection. This issue affects Mediküm Web: through 08072026. NOTE: The vendor was contacted and it was learned that the product is not supported.