SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-2395

CRITICAL · CVSS 9.8 EPSS 0.35%

Source: NVD + CISA KEV + EPSS · Published 2026-07-22 · Last synced 2026-08-21

CyberRota Analysis

AI-Generated

A critical SQL injection vulnerability exists in Xpoda Türkiye Informatics Technology Inc.'s No Code Platform versions prior to 4.1.4, allowing attackers to manipulate SQL commands and potentially access or modify sensitive data. Organizations utilizing this platform should prioritize immediate remediation to mitigate the risk of data breaches and unauthorized access.

CVE
CVE-2026-2395
Severity
CRITICAL
CVSS
9.8
EPSS
0.35%

Original NVD Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4.