CVE-2026-18765

CVSS 9.8 (critical) · published 2026-09-01

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue affects E-OSB: before V02.26.07.08.01.

Weakness: CWE-89

Source: NVD CVE-2026-18765

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0962

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.