CVE-2026-9163

The GIS Informatics GisLab Laboratory Management System versions prior to 1.5 are vulnerable to SQL injection due to improper neutralization of special elements in SQL commands. This critical vulnerability (CVSS 9.8) could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access to sensitive data or system compromise. Organizations using affected versions should prioritize immediate patching to mitigate the risk of exploitation.