← CVE Radar
CVE-2026-9163SQLi in GIS Informatics' GisLab Laboratory Management System
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.
9.8 CRITICALEPSS 0.46%Not in KEVNVD: Deferred
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1TR-CERT (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-9163
- Status
- Deferred
- Assigner (CNA)
- TR-CERT
- Published
- Sep 10, 2026
- Last modified
- 2026-09-10 15:13 UTC
- Weaknesses
- CWE-89 · Improper neutralization of special elements used in an SQL command ('SQL injection')
Affected Products
As published by the CNA in the CVE record.
GIS InformaticsGisLab Laboratory Management System1 version range
- 1.4.03 before 1.5