SQL Injection Vulnerability in Inrove Software BiEticaret
CVE-2026-5955

9.8CRITICAL

Key Information:

Vendor: Inrove Software And Internet Services
Status: Bieticaret
Vendor: CVE Published:; 9 July 2026

🔔 Create Inrove Software And Internet Services Vulnerability Alert

What is CVE-2026-5955?

A vulnerability in Inrove Software and Internet Services' BiEticaret allows attackers to execute unauthorized SQL commands through improperly handled input. This issue affects versions prior to 3.3.57, leading to potential data exposure and manipulation by exploiting the application's failure to neutralize special SQL elements. Ensuring that your software is up to date is crucial to protect against such attacks.

Affected Version(s)

BiEticaret 0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 9, 2026
Vulnerability Reserved
Apr 9, 2026

Credit

Ferit ÖZNER

CVE-2026-5955 Data

JSON