PT-2026-3923 · Aida Computer Information Technology · Hotel Guest Hotspot

Sevban Dönmez · Published 2026-01-22 · Updated 2026-01-27 · CVE-2025-4764

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Aida Computer Information Technology Inc. Hotel Guest Hotspot versions through 22012026

Description A flaw exists in Aida Computer Information Technology Inc. Hotel Guest Hotspot that allows for SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability could potentially allow an attacker to manipulate database queries. The vendor was contacted regarding this issue but did not respond.

Recommendations Update Aida Computer Information Technology Inc. Hotel Guest Hotspot to a version beyond 22012026.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-4764

Affected Products

Hotel Guest Hotspot

References · 7

• https://osv.dev/vulnerability/CVE-2025-4764 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4764 · Security Note
• https://t.me/CVEtracker/42770 · Telegram Post
• https://twitter.com/CVEnew/status/2014269346999132337 · Twitter Post
• https://usom.gov.tr/bildirim/tr-26-0001 · Note
• https://twitter.com/lsof/status/2014399419047616671 · Twitter Post
• https://twitter.com/cracbot/status/2016103995585241293 · Twitter Post