CVE-2026-9163

CVSS 9.8 (critical) · published 2026-09-10

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

Weakness: CWE-89

Source: NVD CVE-2026-9163

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1063

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.