CVE-2026-2397 — SQLi in AdamPOS' MobilMen 20T

CVE-2026-2397

SQLi in AdamPOS' MobilMen 20T PUBLISHED

Description (CNA)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows SQL Injection. This issue affects MobilMen 20T: from v3 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
Adam Retail Automation Ltd. / MobilMen 20T	affected v3 through 10072026

CWE

CWE-89

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0526

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.