Log in Start free

Vulnerability · Published Sep 1, 2026 · Assigned by TR-CERT

CVE-2026-18210SQL Injection in TRtek Technological Products's Store

Critical 9.8

In plain English

A critical-severity SQL injection in Products's Store from TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.5%top 55.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection. This issue affects Products's Store: before 030631b2.

Affected products (as reported)

VendorProductVersions
TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store 0 – before 030631b2

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References