---
id: CVE-2026-74993
title: SQL Injection in Starnet Computer Systems' Inventory Tracking Application
summary: >-
  Improper neutralization of special elements used in an SQL command ('SQL
  injection') vulnerability in Starnet Computer and Network Systems Inventory
  Tracking Application allows SQL Injection.


  This issue affects Inventory Tracking Applic…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-89
vendor: Starnet Computer and Network Systems
product: Inventory Tracking Application
affected:
  - inventory_tracking_application <= 2026-10-16
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-11-02T16:20:14.458209Z'
published: '2026-11-02'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T16:20:26.474Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-74993'
references:
  - url: 'https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1441'
tags:
  - cve.org
epss: 0.00378
epssPercentile: 0.3193
ingestedAt: '2026-11-05T19:30:42.707Z'
---

## Overview

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection.

This issue affects Inventory Tracking Application: through 2026-10-16.

## Affected

- `inventory_tracking_application <= 2026-10-16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.