Is CVE-2026-8307 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-8307?

CVE-2026-8307 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-8307

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection. This issue affects Mediküm Web: through 08072026. NOTE: The vendor was contacted and it was learned that the product is not supported.