CVE-2026-105321: SQL Injection in Kobikom Telecommunications' Kobikom
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows SQL Injection.
This issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.
Event History
Frequently Asked Questions
Which deployments are affected?
Kobikom deployments running a version before KobiPBX-FOP3-SEC-r1 are affected. The provided data does not identify any specific modules, endpoints, or configurations.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the likely impact of successful exploitation?
The CVSS vector indicates high confidentiality impact, with no indicated integrity or availability impact. This suggests an attacker may be able to access sensitive data through the SQL injection flaw.