Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-8025 EUVD-2026-35445GHSA-42qw-cwf6-692f

SQLi in MOSK Informatics' CBS Platform

Published Jun 9, 2026 · Updated Jun 9, 2026 · Assigned by TR-CERT

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information Technologies Ltd. CBS Platform allows SQL Injection.

This issue affects CBS Platform: through 09062026.  NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected products

VendorProductAffectedFixed
MOSK Information Technologies CBS Platform ≤ 09062026 —

References