What is the CVSS score of CVE-2025-7636?

CVE-2025-7636 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ergosis Security Systems Computer Industry are affected by CVE-2025-7636?

A critical SQL injection vulnerability (CVE-2025-7636) affects Ergosis ZEUS PDKS with no patch currently available, potentially allowing attackers to access, modify, or exfiltrate sensitive data from…

How to fix or mitigate CVE-2025-7636?

Within 24 hours: Inventory all ZEUS PDKS deployments and assess exposure (internet-facing vs. internal); enable enhanced logging and monitoring for suspicious database queries. Within 7 days: Implement network segmentation to restrict ZEUS PDKS database access to authorized hosts only; deploy WAF rules to block common SQL injection payloads targeting ZEUS PDKS; contact Ergosis for patch timeline and interim guidance. Within 30 days: Evaluate alternative solutions if patch is not released; conduct full security audit of affected systems; document all mitigation controls implemented.

Ergosis Security Systems Computer Industry CVE-2025-7636

HIGH

SQL Injection (CWE-89)

2026-02-10 iletisim@usom.gov.tr

SQLi

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 10, 2026 - 15:16 nvd

HIGH 8.8

DescriptionCVE.org

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS allows SQL Injection.This issue affects ZEUS PDKS: from <1.0.5.10 through 10022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS is affected by sql injection (CVSS 8.8).

Technical ContextAI

This vulnerability (CWE-89: SQL Injection) affects Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS allows SQL Injection.This issue affects ZEUS PDKS: from <1.0.5.10 through 10022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected ProductsAI

Product: Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS.

RemediationAI

Monitor vendor advisories for a patch. Use parameterized queries. Implement input validation. Restrict network access to the affected service where possible.