CVE-2026-18198: SQL Injection in TAC Information's GoldenHorn
Published Sep 4, 2026
·Updated
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT allows Blind SQL Injection.
This issue affects GOLDENHORN ONEIT: before Göbeklitepe.
Affected Software
1 affected component
TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT<Göbeklitepe
Event History
Sep 4, 2026
CVE Published
via MITRE·12:13 PM
Data Sourced
via MITRE·12:13 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
GOLDENHORN ONEIT versions before Göbeklitepe are affected.
2
What does an attacker need to exploit this issue?
The CVSS vector indicates network access and low privileges are required. User interaction is not required, and attack complexity is low.
3
What is the potential impact of successful exploitation?
The vulnerability is rated high severity with high impacts to confidentiality, integrity, and availability. The CVSS vector indicates the impact remains within the vulnerable product's security authority.