SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-8307

CRITICAL · CVSS 9.8 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-07-08 · Last synced 2026-08-07

CyberRota Analysis

AI-Generated

The Mediküm Web application is vulnerable to SQL injection due to improper handling of special elements in SQL commands, allowing attackers to manipulate database queries. This critical vulnerability, with a CVSS score of 9.8, can lead to unauthorized access to sensitive data and potential system compromise. Organizations using Mediküm Web should prioritize remediation efforts, especially given that the vendor no longer supports the product.

CVE
CVE-2026-8307
Severity
CRITICAL
CVSS
9.8
EPSS
0.27%

Original NVD Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection. This issue affects Mediküm Web: through 08072026. NOTE: The vendor was contacted and it was learned that the product is not supported.