The vulnerability CVE-2025-9953 in Databank Accreditation Software enables an attacker to bypass authorization controls by manipulating a user-controlled SQL primary key, resulting in SQL injection. This can allow unauthorized access and modification of data within the database. The issue affects version 0 of the software prior to April 2026. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable without privileges or user interaction, with high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could lead to complete compromise of the affected database, including unauthorized data disclosure, data modification, and potential denial of service. The critical CVSS score reflects the high severity of these impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict access to the affected software and monitor for suspicious activity related to SQL injection attempts.