{"id":"CVE-2026-82307","published":"2026-09-30T14:17:31.257","lastModified":"2026-09-30T16:18:57.403","description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection.\n\nThis issue affects SOPLOG: before Soplog 2026.9.4.1.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1224","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A SQL injection vulnerability exists in SOPLOG versions before 2026.9.4.1, allowing attackers to execute arbitrary SQL commands and potentially gain full database access.","exploitability":"Exploitation is relatively straightforward given the SQL injection vulnerability, requiring only crafting a malicious input to manipulate the SQL command.","blast_radius":"If exploited, this vulnerability could result in data theft, corruption, or complete compromise of the database, impacting all users and services relying on the affected system.","remediation":"Upgrade to SOPLOG 2026.9.4.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","database","rce","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-01T08:43:45.524Z"}}