This vulnerability (CVE-2025-7744) in Dolusoft Omaspot arises from improper neutralization of special elements used in SQL commands, classified under CWE-89 (SQL Injection). It affects all versions prior to 12.09.2025. The flaw allows unauthenticated remote attackers to execute arbitrary SQL commands, potentially leading to full compromise of the affected system's database confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on all security properties. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow attackers to execute arbitrary SQL commands on the backend database, resulting in unauthorized data disclosure, modification, or deletion, and potentially full system compromise. The vulnerability affects confidentiality, integrity, and availability with high severity. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any available workarounds from the vendor or restrict access to the vulnerable application to trusted users only. Monitor vendor channels for updates regarding patches or mitigations.