← CVE Radar
CVE-2026-8297SQLi in GIS Informatics' GisLab Laboratory Management System
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 through 08072026.
9.8 CRITICALEPSS 0.46%Not in KEVNVD: Deferred
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1TR-CERT (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-8297
- Status
- Deferred
- Assigner (CNA)
- TR-CERT
- Published
- Jul 17, 2026
- Last modified
- 2026-10-24 20:10 UTC
- Weaknesses
- CWE-89 · Improper neutralization of special elements used in an SQL command ('SQL injection')
Affected Products
As published by the CNA in the CVE record.
Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc.GisLab Laboratory Management System1 version range
- 1.4.03 through 08072026