{"id":"CVE-2026-18210","state":"PUBLISHED","title":"SQL Injection in TRtek Technological Products's Store","description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection.\n\nThis issue affects Products's Store: before 030631b2.","publishedAt":"2026-09-01T13:39:27.284Z","updatedAt":"2026-09-01T15:45:41.027Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"TR-CERT"},"assigner":"TR-CERT","products":["TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store"],"affected":[{"vendor":"TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company","product":"Products's Store","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"030631b2","versionType":"custom"}]}],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0964"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/18xxx/CVE-2026-18210.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-18210","state":"PUBLISHED","datePublished":"2026-09-01T13:39:27.284Z","dateUpdated":"2026-09-01T15:45:41.027Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2026-07-29T08:24:16.460Z"},"containers":{"cna":{"title":"SQL Injection in TRtek Technological Products's Store","descriptions":[{"lang":"en","value":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection.\n\nThis issue affects Products's Store: before 030631b2."}],"affected":[{"vendor":"TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company","product":"Products's Store","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"030631b2","versionType":"custom"}]}],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0964","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-09-01T14:27:07.293Z"},"datePublic":"2026-09-01T13:37:00.000Z","impacts":[{"capecId":"CAPEC-66","descriptions":[{"lang":"en","value":"CAPEC-66 SQL Injection"}]}],"credits":[{"lang":"en","value":"Muhammet Talha ODABASI","type":"finder"},{"lang":"en","value":"Yunus KARA","type":"finder"}],"source":{"defect":["TR-26-0964"],"advisory":"TR-26-0964","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-01T15:45:29.128503Z","id":"CVE-2026-18210","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-01T15:45:41.027Z"}}]}}}