PT-2026-5909 · Unknown · Delta Course Automation

Published 2026-02-04 · Updated 2026-02-09 · CVE-2025-5329

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Course Automation versions through 04022026

Description Delta Course Automation is susceptible to a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows for potential unauthorized database access. The vendor was contacted regarding this issue but did not respond. No information is available regarding the number of potentially affected devices or any real-world exploitation of this issue. The vulnerability allows full database access without authentication.

Recommendations Versions prior to 04022026 should be updated.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-5329

Affected Products

Delta Course Automation

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-5329 · Security Note
• https://usom.gov.tr/bildirim/tr-26-0018 · Note
• https://twitter.com/cracbot/status/2020814994926190950 · Twitter Post
• https://twitter.com/0dayPublishing/status/2019043632616013981 · Twitter Post
• https://twitter.com/TheHackerWire/status/2019054275473850546 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0018 · Note
• https://t.me/CVEtracker/43719 · Telegram Post
• https://twitter.com/CVEnew/status/2019051164298318127 · Twitter Post