CVE-2025-10970 in Talenticsinformazioni

Riassunto

di MITRE • 20/02/2026

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection.

This issue affects Talentics: through 20022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

TR-CERT

Prenotare

25/09/2025

Divulgazione

20/02/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00297

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-10970
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-10970
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-10970/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to know what is going to be exploited?

We predict KEV entries!