What is CVE-2025-4764?

CVE-2025-4764 is a high-severity vulnerability in Aida Hotel Guest Hotspot, classified under SQL Injection. CVSS score: 8.0/10. Published 2026-01-22.

How severe is CVE-2025-4764?

High severity. CVSS v3 base score is 8.0 out of 10.

SQL Injection in Aida Hotel Guest Hotspot

CVE-2025-4764

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aida Computer Information Technology Inc. Hotel Guest Hotspot allows SQL Injection. This issue affects Hotel Guest Hotspot: through 22012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability class: SQL Injection

EPSS: 0.004 (36.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Aida Hotel_guest_hotspot
Aida Computer Information Technology Inc. Hotel Guest Hotspot — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

iletisim@usom.gov.tr (government-resource, Third Party Advisory, broken-link)
iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2025-4764?: CVE-2025-4764 is a high-severity vulnerability in Aida Hotel Guest Hotspot, classified under SQL Injection. CVSS score: 8.0/10. Published 2026-01-22.
How severe is CVE-2025-4764?: High severity. CVSS v3 base score is 8.0 out of 10.