CVE-2025-10439 is an SQL Injection vulnerability (CWE-89) in Yordam Informatics Yordam Library Automation System affecting versions 21.5 and 21.6 prior to 21.7. The vulnerability arises from improper neutralization of special elements in SQL commands, allowing unauthenticated remote attackers to execute arbitrary SQL code. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting high impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available, and no known exploits have been reported in the wild.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the backend database of the Yordam Library Automation System. This can lead to full compromise of the database including unauthorized data disclosure, data modification, and potential denial of service. The critical CVSS score of 9.8 reflects the high impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected versions (21.5 and 21.6) of the Yordam Library Automation System and monitor for any updates from Yordam Informatics. No vendor advisory or patch links are currently available.