{"affected":[{"defaultStatus":"unaffected","product":"Kobikom","source":"CNA: TR-CERT","vendor":"Kobikom Telecommunications and Informatics Services Inc.","versions":[{"lessThan":"KobiPBX-FOP3-SEC-r1","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-105321","cwes":["CWE-89"],"description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows SQL Injection.\n\nThis issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: TR-CERT","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793884404129,"publishedAt":1793884404129,"references":[{"source":"CNA: TR-CERT","tags":["government-resource"],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1467"}],"remediation":[],"revision":"9afa934f9b6562290a82d14b55f961478620a34828486c044f6e68fc24b48b0b","sources":[{"modifiedAt":1793884404129,"name":"CNA: TR-CERT","retrievedAt":1793887725601,"url":"https://www.cve.org/CVERecord?id=CVE-2026-105321"}],"ssvc":null,"status":"published","title":"SQL Injection in Kobikom Telecommunications' Kobikom","updatedAt":1793887725601}