Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-8307 EUVD-2026-42223GHSA-g684-5gx4-77w9

SQLi in Webbeyaz's Mediküm Web

Published Jul 8, 2026 · Updated Jul 9, 2026 · Assigned by TR-CERT

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection.

This issue affects Mediküm Web: through 08072026. NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected products

VendorProductAffectedFixed
Webbeyaz Web Design Mediküm Web ≤ 08072026 —

References