EUVD-2026-40296
GHSA-jg5p-684r-wfw3
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Remote unauthenticated blind SQLi over the network with low complexity (AV:N/AC:L/PR:N/UI:N); injection enables full read, modification, and disruption of the backend database, so C/I/A all High.
Primary rating from Vendor (TR-CERT).
CVSS VectorVendor: TR-CERT
Lifecycle Timeline
2DescriptionCVE.org
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Eksagate Electronic Engineering and Computer Industry Trade Inc. SYSGUARD 6001 allows Blind SQL Injection.
This issue affects SYSGUARD 6001: from 2.0.2 before 6.1.16.0. NOTE: The vendor was contacted and it was learned that the product is not supported.
AnalysisAI
Blind SQL injection in Eksagate SYSGUARD 6001 (versions 2.0.2 up to but not including 6.1.16.0) lets remote unauthenticated attackers inject crafted SQL through improperly neutralized input, enabling extraction or manipulation of backend database contents. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) rates it 9.8 Critical with full confidentiality, integrity, and availability impact. No public exploit has been identified at time of analysis, but the vendor has confirmed the product is no longer supported, so no fix will be issued for affected branches.
Technical ContextAI
The flaw is a classic CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) defect, here manifesting as a blind variant where the application returns no direct SQL error or data, forcing inference through boolean or time-based responses. SYSGUARD 6001 is a Turkish-origin product from Eksagate Electronic Engineering and Computer Industry Trade Inc., identified by CPE cpe:2.3:a:eksagate_electronic_engineering_and_computer_industry_trade_inc.:sysguard_6001. The root cause is direct concatenation of untrusted input into SQL statements rather than using parameterized queries or prepared statements; because it is blind, an attacker automates extraction by observing differential application behavior across many crafted requests.
RemediationAI
No vendor-released patch identified at time of analysis - the vendor confirmed SYSGUARD 6001 is unsupported, so the fixed-version reference '6.1.16.0' implied by the affected range cannot be relied upon as an available remediation for end users. Because patching is not viable, the practical path is to decommission or replace the product where possible; if it must remain in operation, restrict network reachability by placing the application behind a firewall or VPN and blocking direct internet exposure to limit the AV:N vector, and deploy a web application firewall with SQL injection signatures in front of the affected endpoints (accepting that WAF rules can be bypassed and may cause false positives). Additionally, restrict the database account used by the application to least privilege to limit blast radius of injection, and enable database query and application access logging to detect the high request volumes characteristic of blind SQLi enumeration. Reference the TR-CERT advisory for vendor contact and details: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0467.
More in Sysguard 6001
View allSame weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today