CVE-2026-5956: CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection') in Ankara Hosting Site Management Panel

This vulnerability, identified as CWE-89, involves improper neutralization of special elements used in SQL commands within the Ankara Hosting Site Management Panel. This flaw enables SQL injection attacks, which can compromise confidentiality, integrity, and availability of the affected system. The CVSS 3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction, and impacts confidentiality, integrity, and availability. The affected versions include all versions up to 15062026. No known exploits are reported in the wild, and no vendor remediation or patch information is currently available.

Successful exploitation of this vulnerability could allow an attacker with low privileges to execute arbitrary SQL commands remotely, leading to full compromise of the database including unauthorized data disclosure, data modification, and potential denial of service. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying compensating controls such as input validation, web application firewalls, or limiting database permissions to reduce risk.