CVE-2026-1617
A critical SQL injection flaw exists in Turkhotspot 5651 Loglama. The vulnerability allows attackers to run arbitrary SQL commands against the database. It is present in versions 5.1.2 through 5.1.2 and is fixed in 5.1.3.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama versions 5.1.2 up to but not including 5.1.3, used by administrators managing the system.
Real-world impact
An attacker who can reach the vulnerable component can read, modify, or delete data in the database, potentially exposing sensitive information or disrupting services.
Why this severity
The CVSS score of 9.8 reflects that the flaw can be exploited over the network with no authentication, giving full control over confidentiality, integrity, and availability of the data.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources