PT-2026-21009 · Talentics · Talentics

Berat Arslan · Published 2026-02-20 · Updated 2026-02-25 · CVE-2025-10970

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Talentics versions through 20022026

Description A flaw exists in Talentics that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. The vendor was contacted regarding this issue but did not respond.

Recommendations Versions through 20022026 should be updated when a fix becomes available.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-10970

Affected Products

Talentics

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-10970 · Security Note
• https://t.me/CVEtracker/45263 · Telegram Post
• https://twitter.com/CveFindCom/status/2024835021966561687 · Twitter Post
• https://twitter.com/cracbot/status/2026613216625963087 · Twitter Post
• https://t.me/cveNotify/152569 · Telegram Post
• https://twitter.com/TheHackerWire/status/2024831590384431269 · Twitter Post
• https://usom.gov.tr/bildirim/tr-26-0081 · Note
• https://twitter.com/CVEnew/status/2025809079520923834 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2024850341112524852 · Twitter Post