SQL Injection in TRtek Technological Products's Store

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Affected scope and exposure questions

The current feed maps TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company/Products's Store (generic). Check affected ranges and fixed versions before updating.

Recommended response

1. 1Check inventory. Check lockfiles and deployed manifests for TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company/Products's Store.
2. 2Review the reported fix. Update TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company/Products's Store to 030631b2 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

1. Published upstream

   Sep 1, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

2. Source modified

   Sep 1, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

3. First seen by HOL

   Sep 1, 2026

Sources and claim methodology

• Source referencesiberguvenlik.gov.tr

Related CVEs

• SQL Injection in Teracity Sotware's Teracity E-OSB PlatformAlso CWE-89
• Xinhu Rainrock RockOA webmainAction.php getOrder sql injectionAlso CWE-89
• Chanjet CRM jxf_dump_table.php sql injectionAlso CWE-89
• Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of ServiceSame generic ecosystem
• FactoryTalk® Historian Machine Edition - Out-of-Bounds Write VulnerabilitySame generic ecosystem
• FactoryTalk® Historian Machine Edition - Out-of-Bounds Write VulnerabilitySame generic ecosystem