CVE-2026-4978

CriticalCVSS 9.8/10Last modified Oct 23, 2026

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection.

This issue affects Traffic Analysis System: from 30 before 34.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
UMAI VisionTraffic Analysis System>= 29, < 34

References

Timeline

Published
Jul 30, 2026
Last modified
Oct 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-497808.8Customer Privilege Escalation in Dokan <= 5.0.2 versions.CVE-2026-497819.8Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions.CVE-2026-497825.4Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security CVE-2026-497837.8Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locallyCVE-2026-497847.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authoriCVE-2026-497857.8Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.CVE-2026-497877.5Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.CVE-2026-497887.5Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.CVE-2026-497897.8Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-49795.0The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to CVE-2026-497907.8Integer underflow (wrap or wraparound) in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate pCVE-2026-497917.8Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized atta
CVE-2026-4978: Critical severity, CVSS 9.8 | Vulnix