SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-8297

CRITICAL · CVSS 9.8 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-07-17 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The GisLab Laboratory Management System, versions 1.4.03 through 08072026, is vulnerable to SQL injection due to improper handling of special elements in SQL commands. This critical vulnerability (CVSS 9.8) could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access to sensitive data or system compromise. Organizations using this software should prioritize immediate remediation to mitigate the risk of exploitation.

CVE
CVE-2026-8297
Severity
CRITICAL
CVSS
9.8
EPSS
0.26%

Original NVD Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 through 08072026.