{"id":"CVE-2026-18630","aliases":["EUVD-2026-69284","GHSA-532w-xx5j-hxxw"],"status":"published","title":"SQL Injection in TMT Machine's Talassoft Industrial Management Software","description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection.\n\nThis issue affects Talassoft Industrial Management Software: from V.4 before V.16.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0043,"percentile":0.3764,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2026-09-01T15:08:50Z","modified":"2026-09-01T21:10:38Z","products":[{"vendor":"tmt machine industry and trade ltd. co.","product":"talassoft industrial management software"}],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0965","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18630"},{"url":"https://github.com/advisories/GHSA-532w-xx5j-hxxw"}],"sources":{"cve":[{"id":"CVE-2026-18630","title":"SQL Injection in TMT Machine's Talassoft Industrial Management Software","description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection.\n\nThis issue affects Talassoft Industrial Management Software: from V.4 before V.16.","status":"published","published":"2026-09-01T15:08:50.285Z","modified":"2026-09-01T15:21:49.187Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:20:12.60856Z"}],"euvd":[{"id":"EUVD-2026-69284","description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection.\n\nThis issue affects Talassoft Industrial Management Software: from V.4 before V.16.","status":"published","published":"2026-09-01T15:08:50Z","modified":"2026-09-01T15:21:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:01:17.79788Z"}],"ghsa":[{"id":"GHSA-532w-xx5j-hxxw","title":"Improper neutralization of special elements used in an SQL command ('SQL injection')...","description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection.\n\nThis issue affects Talassoft Industrial Management Software: from V.4 before V.16.","status":"published","published":"2026-09-01T15:31:13Z","modified":"2026-09-01T15:31:18Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:11:13.213599Z"}],"nvd":[{"id":"CVE-2026-18630","description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection.\n\nThis issue affects Talassoft Industrial Management Software: from V.4 before V.16.","status":"published","published":"2026-09-01T15:17:12.753Z","modified":"2026-09-01T21:10:38.413Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:12:43.04945Z"}]}}