This vulnerability (CVE-2026-8025) in MOSK Information Technologies Ltd. CBS Platform is due to improper neutralization of special elements used in SQL commands, classified as CWE-89 (SQL Injection). It allows remote attackers to execute arbitrary SQL commands without authentication, leading to full compromise of the affected system's data confidentiality, integrity, and availability. The product version affected is up to 09062026. The vendor has confirmed the product is no longer supported, and no remediation or patch is available.

Successful exploitation of this SQL injection vulnerability can lead to unauthorized disclosure, modification, or deletion of data within the CBS Platform database. It also can result in complete system compromise, affecting confidentiality, integrity, and availability of the platform. Given the critical CVSS score of 9.8, the impact is severe.

No official patch or remediation is available because the product is no longer supported by the vendor. Organizations using this product should consider discontinuing its use or implementing compensating controls such as network segmentation, strict input validation at application level if possible, or migrating to a supported alternative. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance if it becomes available.