PT-2026-22336 · Signum Technology Promotion Training · Windesk.Fm

Engin Aydoğan · Published 2026-02-27 · Updated 2026-03-04 · CVE-2025-11252

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Signum Technology Promotion and Training Inc. Windesk.Fm versions through 27022026

Description An issue exists in Windesk.Fm that allows for SQL Injection. The issue is due to improper neutralization of special elements used in an SQL command. The vulnerability could potentially allow an attacker to inject malicious SQL code, potentially gaining unauthorized access to the database or manipulating data.

Recommendations Versions prior to 27022026 should be updated.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-11252

Affected Products

Windesk.Fm

References · 8

• https://osv.dev/vulnerability/CVE-2025-11252 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11252 · Security Note
• https://t.me/CVEtracker/45978 · Telegram Post
• https://usom.gov.tr/bildirim/tr-26-0085 · Note
• https://twitter.com/TheHackerWire/status/2027372884273054177 · Twitter Post
• https://twitter.com/CVEnew/status/2027380154125668467 · Twitter Post
• https://t.me/cveNotify/153462 · Telegram Post
• https://twitter.com/cracbot/status/2029150022571606479 · Twitter Post