How severe is CVE-2024-7026?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2024-7026 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Teknogis Informatics Closed Circuit Vehicle Tracking Software

CVE-2024-7026

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection. This issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability class: SQL Injection

EPSS: 0.006 (46.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Teknogis Informatics Closed Circuit Vehicle Tracking Software — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

iletisim@usom.gov.tr (government-resource, broken-link)
iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2024-7026?: CVE-2024-7026 is a high-severity vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software, classified under SQL Injection. CVSS score: 7.5/10. Published 2024-11-21.
How severe is CVE-2024-7026?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2024-7026 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.