CVE-2026-8025
This vulnerability is a critical SQL injection flaw in MOSK Information Technologies Ltd. CBS Platform, allowing attackers to execute arbitrary SQL commands. It can lead to full compromise of the database, including data theft, modification, or deletion. The product is no longer supported, so no patch is available.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
MOSK Information Technologies Ltd. CBS Platform, versions up to 09062026.
Real-world impact
An attacker could read, modify, or delete any data in the database, potentially taking full control of the application and its underlying infrastructure.
Why this severity
The CVSS score of 9.8 reflects that the flaw can be exploited remotely with no authentication, and it can compromise confidentiality, integrity, and availability of the affected system.
What to do about it
- ›Discontinue use of the affected platform.
- ›If the platform must remain in use, isolate it from untrusted networks and monitor for suspicious activity.
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources.
Timeline
- Jun 9, 2026 · Jun 9, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 23, 2026 · 12d agoAdvisory updatedThe NVD record was last revised.