CVE-2026-9163
Critical
9.8 CVSS v3.1
- Published
- Sep 10, 2026
- Updated
- Sep 10, 2026
- Vendor
- —
- Affected versions
- —
- Weakness
- CWE-89
Summary
Improper neutralization of special elements used in an SQL command (‘SQL injection’) vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection.
This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.
Severity
Critical (9.8)CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Not listed by the source yet.
Exploitation status
Unknown
Technical details
Technical analysis has not been written for this record yet.
Mitigation & remediation
Follow the vendor advisory linked below for patches and workarounds.