PT-2026-5656 · Akce Software Technology · Skspro

Enes Ebubeki̇r · Published 2026-02-02 · Updated 2026-02-02 · CVE-2025-8587

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AKCE Software Technology R&D Industry and Trade Inc. SKSPro versions through 07012026

Description The software contains an Improper Neutralization of Special Elements used in an SQL Command issue, specifically a SQL Injection. This allows for SQL Injection attacks. The vulnerability exists due to insufficient sanitization of input data used in SQL queries. The vulnerability could allow an attacker to manipulate database queries, potentially leading to unauthorized access, data modification, or data deletion. No information is available regarding the number of potentially affected devices or real-world incidents where this issue was exploited. The vulnerability affects the processing of SQL commands, potentially through vulnerable parameters used in database interactions.

Recommendations Versions prior to 07012026 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-8587

Affected Products

Skspro

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-8587 · Security Note
• https://twitter.com/TheHackerWire/status/2018312694118699395 · Twitter Post
• https://t.me/CVEtracker/43494 · Telegram Post
• https://twitter.com/CVEnew/status/2018321188498571352 · Twitter Post
• https://twitter.com/CveFindCom/status/2018326380769878483 · Twitter Post
• https://usom.gov.tr/bildirim/tr-26-0011 · Note
• https://twitter.com/VulmonFeeds/status/2018356290959933550 · Twitter Post