CRITICAL 9.8 NVD

CVE-2026-12718

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Karel Electronic Industry and Trade Inc. KarelIPS allows B

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Karel Electronic Industry and Trade Inc. KarelIPS allows Blind SQL Injection. This issue affects KarelIPS: through 22092026. NOTE: The vendor was contacted and it was learned that the product is not supported.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1146

Published: 2026-09-22 · Source: NVD · Feed updated: 2026-09-23

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-22 via NVD.

Risk Timeline

CVE Disclosed2026-09-22 · 0 days ago

Remediation Resources

Analysis & PoC

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1146

vulnfeed aggregates 12912 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.