Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-10970 EUVD-2025-207831GHSA-4jf6-4wfh-g46g

SQLi in Kolay Software's Talentics

Published Feb 20, 2026 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection.

This issue affects Talentics: through 20022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

VendorProductAffectedFixed
Kolay Software Talentics ≤ 20022026 —

References