CVE-2026-7188criticalCWE-89

CVE-2026-7188: critical vulnerability in Armiya Information Technologies Ltd. Co.

SQLi in Armiya Information Technologies' Access Control System

Published

Follow this CVE+ Monitor Access Control System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.5%
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Armiya Information Technologies Ltd. Co. · Access Control System
Related CVEs — Armiya Information Technologies Ltd. Co.

In the same product, most dangerous first.

CVE-2026-8323CRITICALOpen Redirect in Armiya Information Technologies' Access Control SystemEPSS 0.4%