CVE-2026-5956: SQLi in Ankara Hosting's Site Management Panel

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation does not require user interaction and can be performed over the network.

Q: What could a successful attacker do?

The reported impact includes high confidentiality, integrity, and availability effects. A successful SQL injection could therefore expose, alter, or disrupt data handled by the affected panel.

Q: Which versions are affected?

The issue is reported to affect Ankara Hosting Site Management Panel through 15062026. No fixed version or remediation release is identified in the provided information.

Published Aug 31, 2026

Updated

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Ankara Hosting Site Management Panel allows SQL Injection.

This issue affects Site Management Panel: through 15062026.

Affected Software

1 affected component

Ankara Hosting Site Management Panel<15062026

Event History

Aug 31, 2026

CVE Published

via MITRE·12:43 PM

Data Sourced

via MITRE·12:43 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation does not require user interaction and can be performed over the network.

What could a successful attacker do?

The reported impact includes high confidentiality, integrity, and availability effects. A successful SQL injection could therefore expose, alter, or disrupt data handled by the affected panel.

Which versions are affected?