Vulnerability · Published Jun 4, 2026 · Assigned by TR-CERT
CVE-2026-4104SQLi in Akmer Informatics' TeknoPass
Critical 9.8
In plain English
A critical-severity SQL injection in TeknoPass from Akmer Informatics Automation Industry and Trade Ltd. Co.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.3%top 77.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and Trade Ltd. Co. TeknoPass allows SQL Injection. This issue affects TeknoPass: from 20210501 through 20260429.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Akmer Informatics Automation Industry and Trade Ltd. Co. | TeknoPass | 20210501 – through 20260429 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0309 government-resource