CVE-2026-18210: SQL Injection in TRtek Technological Products's Store

Q: Which versions are affected?

Products's Store versions before 030631b2 are affected. The provided information does not identify a fixed release name or version beyond that boundary.

Q: Can this be exploited remotely without authentication?

Yes. The CVSS vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required.

Q: What is the potential impact of successful exploitation?

Successful SQL injection could result in high impact to confidentiality, integrity, and availability, according to the supplied CVSS metrics.

Published Sep 1, 2026

Updated

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection.

This issue affects Products's Store: before 030631b2.

Affected Software

1 affected component

TRtek Technological Products's Store<030631b2

Event History

Sep 1, 2026

CVE Published

via MITRE·01:39 PM

Data Sourced

via MITRE·01:39 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which versions are affected?

Products's Store versions before 030631b2 are affected. The provided information does not identify a fixed release name or version beyond that boundary.

Can this be exploited remotely without authentication?

Yes. The CVSS vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required.

What is the potential impact of successful exploitation?