PT-2026-20834 · Unknown · Databank Accreditation

CVE-2025-9953 · Published 2026-02-19 · Updated 2026-06-25

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Databank Accreditation Software versions prior to 2026/04

Description An authorization bypass exists due to a user-controlled SQL primary key flaw. This allows an attacker to perform SQL injection, which can be used to bypass authorization controls and lead to unauthorized access and manipulation of sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-566

Related Identifiers

CVE-2025-9953

Affected Products

Databank Accreditation

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-9953 · Security Note
• https://twitter.com/TheHackerWire/status/2024509805617193159 · Twitter Post
• https://t.me/cveNotify/175051 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0078 · Note
• https://usom.gov.tr/bildirim/tr-26-0078 · Note
• https://twitter.com/CveTodo/status/2024514323033276614 · Twitter Post
• https://twitter.com/0dayPublishing/status/2024456433559896187 · Twitter Post
• https://twitter.com/CVEnew/status/2024501218274660424 · Twitter Post
• https://t.me/CVEtracker/45118 · Telegram Post