CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-8297 — Critical vulnerability brief

July 17, 2026CVSS 9.8

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 through 08072026.

CVSS base score: 9.8 / 10

View NVD record