CVE-2025-8587 is an SQL Injection vulnerability (CWE-89) in the SKSPro product by AKCE Software Technology R&D Industry and Trade Inc., affecting versions up to 07012026. The vulnerability arises from improper neutralization of special elements in SQL commands, allowing remote unauthenticated attackers to inject malicious SQL code. The CVSS 3.1 base score is 8.6, reflecting low attack complexity, no privileges required, no user interaction, and impacts including partial confidentiality and integrity loss plus high availability impact. No patch or official remediation guidance is currently provided, and no known exploits have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the affected SKSPro system remotely without authentication. This may lead to unauthorized disclosure of data (confidentiality impact), unauthorized modification of data (integrity impact), and disruption of service (availability impact). The CVSS score indicates a high severity with significant potential impact on system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected application and monitor for unusual activity. Avoid exposing the vulnerable service to untrusted networks. Follow vendor communications closely for updates on patches or mitigations.