CVE-2026-18630
SQL Injection in TMT Machine's Talassoft Industrial Management Software
- State
- Published
- Severity
- 8.8 High
- Published
- Sep 1, 2026
- Updated
- Sep 1, 2026
- Reserved
- Aug 3, 2026
Description
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection.
This issue affects Talassoft Industrial Management Software: from V.4 before V.16.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | TR-CERT |
Weaknesses
- CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection')
Affected Products
| Product | Versions |
|---|---|
Talassoft Industrial Management SoftwareTMT Machine Industry and Trade Ltd. Co. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0965government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.