PT-2026-21009 · Kolay Software · Talentics

Berat Arslan · Published 2026-02-20 · Updated 2026-02-20 · CVE-2025-10970

Mitre

CVSS v3.1

9.8

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection.This issue affects Talentics: through 20022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-10970

Affected Products

Talentics

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-10970 · Security Note
• https://usom.gov.tr/bildirim/tr-26-0081 · Note