SQL Injection Vulnerability in GIS Informatics GisLab Laboratory Management System
CVE-2026-9163

9.8CRITICAL

Key Information:

Vendor: Gis Informatics
Status: Gislab Laboratory Management System
Vendor: CVE Published:; 10 September 2026

🔔 Create Gis Informatics Vulnerability Alert

What is CVE-2026-9163?

A vulnerability exists in the GIS Informatics GisLab Laboratory Management System, allowing attackers to manipulate SQL queries through improper handling of special elements. This SQL injection flaw can potentially expose sensitive data stored in the database, posing a significant risk to laboratory management operations.

Affected Version(s)

GisLab Laboratory Management System 1.4.03 < 1.5

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 10, 2026
Vulnerability Reserved
May 21, 2026

Credit

Ceylan BOZOĞULLARINDAN

CVE-2026-9163 Data

JSON