PT-2026-7107 · Unknown · Xpoda Studio

Published 2026-02-09 · Updated 2026-02-11 · CVE-2025-6830

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xpoda Studio versions through 09022026

Description Xpoda Studio contains a flaw due to improper neutralization of special elements used in an SQL command, leading to a SQL Injection issue. The vulnerability allows for potential unauthorized access or modification of data through crafted SQL queries.

Recommendations Versions prior to 09022026 should be updated.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-6830

Affected Products

Xpoda Studio

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-6830 · Security Note
• https://usom.gov.tr/bildirim/tr-26-0020 · Note
• https://t.me/cveNotify/151682 · Telegram Post
• https://t.me/cveNotify/151664 · Telegram Post
• https://t.me/cveNotify/151396 · Telegram Post
• https://t.me/CVEtracker/44206 · Telegram Post
• https://twitter.com/TheHackerWire/status/2020845606244385093 · Twitter Post