← CVE Radar
CVE-2026-4978SQLi in UMAI Vision's Traffic Analysis System
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34.
9.8 CRITICALEPSS 0.46%Not in KEVNVD: Deferred
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1TR-CERT (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-4978
- Status
- Deferred
- Assigner (CNA)
- TR-CERT
- Published
- Jul 30, 2026
- Last modified
- 2026-10-23 22:10 UTC
- Weaknesses
- CWE-89 · Improper neutralization of special elements used in an SQL command ('SQL injection')
Affected Products
As published by the CNA in the CVE record.
UMAI VisionTraffic Analysis System1 version range
- 29 before 34