{"api_version":"1","generated_at":"2026-07-08T04:31:09+00:00","cve":"CVE-2024-7026","urls":{"html":"https://cve.report/CVE-2024-7026","api":"https://cve.report/api/cve/CVE-2024-7026.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2024-7026","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-7026"},"summary":{"title":"SQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking Software","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection.\n\nThis issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024.\n\n\n\n\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way.","state":"PUBLISHED","assigner":"TR-CERT","published_at":"2024-11-21 14:15:18","updated_at":"2026-06-03 13:16:16"},"problem_types":["CWE-89","CWE-89 CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"],"metrics":[{"version":"3.1","source":"iletisim@usom.gov.tr","type":"Secondary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-24-1866","name":"https://www.usom.gov.tr/bildirim/tr-24-1866","refsource":"iletisim@usom.gov.tr","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1866","name":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1866","refsource":"iletisim@usom.gov.tr","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-7026","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7026","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Teknogis Informatics","product":"Closed Circuit Vehicle Tracking Software","version":"affected 21.11.2024 custom","platforms":[]},{"source":"ADP","vendor":"teknogis_informatics","product":"close_circuit_vehicle_tracking_software","version":"affected 21.11.2024 custom","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Yunus ORNEK","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2024","cve_id":"7026","cve":"CVE-2024-7026","epss":"0.001200000","percentile":"0.305100000","score_date":"2026-06-08","updated_at":"2026-06-09 00:12:52"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"affected":[{"cpes":["cpe:2.3:a:teknogis_informatics:close_circuit_vehicle_tracking_software:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"close_circuit_vehicle_tracking_software","vendor":"teknogis_informatics","versions":[{"lessThanOrEqual":"21.11.2024","status":"affected","version":"0","versionType":"custom"}]}],"metrics":[{"other":{"content":{"id":"CVE-2024-7026","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-11-21T14:24:04.093097Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2025-01-09T16:31:58.161Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"affected","product":"Closed Circuit Vehicle Tracking Software","vendor":"Teknogis Informatics","versions":[{"lessThanOrEqual":"21.11.2024","status":"affected","version":"0","versionType":"custom"}]}],"credits":[{"lang":"en","type":"finder","value":"Yunus ORNEK"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection.<p>This issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024.</p><p>\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\n\n\n\n<br></p>"}],"value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection.\n\nThis issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024.\n\n\n\n\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way."}],"impacts":[{"capecId":"CAPEC-66","descriptions":[{"lang":"en","value":"CAPEC-66 SQL Injection"}]},{"capecId":"CAPEC-7","descriptions":[{"lang":"en","value":"CAPEC-7 Blind SQL Injection"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-06-03T11:59:40.019Z","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","shortName":"TR-CERT"},"references":[{"tags":["government-resource","broken-link"],"url":"https://www.usom.gov.tr/bildirim/tr-24-1866"},{"tags":["government-resource"],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1866"}],"source":{"advisory":"TR-24-1866","defect":["TR-24-1866"],"discovery":"UNKNOWN"},"title":"SQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking Software","x_generator":{"engine":"Vulnogram 0.2.0"}}},"cveMetadata":{"assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","assignerShortName":"TR-CERT","cveId":"CVE-2024-7026","datePublished":"2024-11-21T13:21:59.843Z","dateReserved":"2024-07-23T13:12:29.654Z","dateUpdated":"2026-06-03T11:59:40.019Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2024-11-21 14:15:18","lastModifiedDate":"2026-06-03 13:16:16","problem_types":["CWE-89","CWE-89 CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"],"metrics":{"cvssMetricV31":[{"source":"iletisim@usom.gov.tr","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2024","CveId":"7026","Ordinal":"1","Title":"SQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking So","CVE":"CVE-2024-7026","Year":"2024"},"notes":[{"CveYear":"2024","CveId":"7026","Ordinal":"1","NoteData":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection.\n\nThis issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024.\n\n\n\n\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way.","Type":"Description","Title":"SQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking So"}]}}}