{"id":"CVE-2026-74993","title":"SQL Injection in Starnet Computer Systems' Inventory Tracking Application","summary":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection.\n\nThis issue affects Inventory Tracking Applic…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-89"],"vendor":"Starnet Computer and Network Systems","product":"Inventory Tracking Application","affected":["inventory_tracking_application <= 2026-10-16"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-11-02T16:20:14.458209Z"},"published":"2026-11-02","updated":"2026-11-02","sourceUpdated":"2026-11-02T16:20:26.474Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74993","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1441"}],"tags":["cve.org"],"epss":0.00378,"epssPercentile":0.3193,"ingestedAt":"2026-11-05T19:30:42.707Z","slug":"CVE-2026-74993","body":"## Overview\n\nImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection.\n\nThis issue affects Inventory Tracking Application: through 2026-10-16.\n\n## Affected\n\n- `inventory_tracking_application <= 2026-10-16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}