CVE-2026-7188

critical · 9.8

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2.

9.8

CVSS

0.5%

EPSS (exploit prob.)

40th

EPSS percentile

2026-09-10

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1061

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-7188