{"affected":[{"defaultStatus":"unaffected","product":"Inventory Tracking Application","source":"CNA: TR-CERT","vendor":"Starnet Computer and Network Systems","versions":[{"lessThanOrEqual":"2026-10-16","status":"affected","version":"0","versionType":"date"}]}],"cveId":"CVE-2026-74993","cwes":["CWE-89"],"description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection.\n\nThis issue affects Inventory Tracking Application: through 2026-10-16.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: TR-CERT","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793626637005,"publishedAt":1793626637005,"references":[{"source":"CNA: TR-CERT","tags":["government-resource"],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1441"}],"remediation":[],"revision":"a2b66abc8a48c2a855f1ab0aa983d85e1267bf79565a51a03b55f7be7a4849d2","sources":[{"modifiedAt":1793626637005,"name":"CNA: TR-CERT","retrievedAt":1793628544149,"url":"https://www.cve.org/CVERecord?id=CVE-2026-74993"}],"ssvc":null,"status":"published","title":"SQL Injection in Starnet Computer Systems' Inventory Tracking Application","updatedAt":1793628544149}