{"id":"CVE-2026-85215","published":"2026-10-02T14:17:11.327","lastModified":"2026-10-02T14:30:51.640","description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection.\n\nThis issue affects Paperwork: through 2026-09-09.","cvssScore":7.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1244","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}