CVE-2026-4321 PUBLISHED

SQLi in Raera's Destekz

Assigner: TR-CERT
Reserved: 17.03.2026 Published: 03.07.2026 Updated: 03.07.2026

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency Destekz allows SQL Injection.

This issue affects Destekz: through 02062026. NOTE: The vendor was contacted and it was learned that the product is not supported.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Raera - Ankara Web Design and Digital Advertising Agency
Product	Destekz
Versions	Default: unknown affected from 0 to 02062026 (incl.)

Credits

Hasan YILDIZ finder

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0488

Problem Types

CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection') CWE

Impacts

CAPEC-66 SQL Injection