This vulnerability (CVE-2026-1617) is an SQL injection issue in Turkhotspot 5651 Loglama by Turkmesh Communication Services Inc. It arises from improper neutralization of special elements used in SQL commands, classified under CWE-89. The affected version is 5.1.2, with the issue resolved in 5.1.3. The CVSS 3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability. No vendor advisory or patch link is currently available, and the product is not a cloud service.

Successful exploitation of this SQL injection vulnerability can lead to complete compromise of the affected system's confidentiality, integrity, and availability. Attackers may execute arbitrary SQL commands, potentially accessing, modifying, or deleting sensitive data and disrupting service operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor the vendor's communications for updates and consider applying version 5.1.3 or later once available. Until then, restrict network access to the affected service and apply any available workarounds recommended by the vendor.