What is the CVSS score of CVE-2025-5329?

CVE-2025-5329 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Martcode Software Inc. Delta Course Automation are affected by CVE-2025-5329?

A critical SQL injection vulnerability (CVSS 9.8) in Delta Course Automation allows unauthenticated attackers to execute arbitrary database commands, potentially exposing or modifying sensitive…

How to fix or mitigate CVE-2025-5329?

Within 24 hours: Immediately inventory all Delta Course Automation deployments and their versions; isolate affected systems from production networks if possible; enable enhanced logging and monitoring for SQL injection patterns. Within 7 days: Apply network-level compensating controls (WAF rules blocking SQL syntax); restrict database account privileges to minimum required; conduct database access audit for unauthorized queries. Within 30 days: Contact Martcode Software for patch timeline and interim security updates; evaluate alternative course automation platforms if patches remain unavailable; perform forensic analysis for evidence of exploitation.

Martcode Software Inc. Delta Course Automation CVE-2025-5329

CRITICAL

SQL Injection (CWE-89)

2026-02-04 iletisim@usom.gov.tr

SQLi

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 04, 2026 - 14:16 nvd

CRITICAL 9.8

DescriptionCVE.org

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection.This issue affects Delta Course Automation: through 04022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

An Emit Informatics product has a SQL injection vulnerability allowing unauthenticated attackers to compromise the database through unsanitized input.