CVE-2025-9953
Critical · 9.8CVSS
9.8
EPSS
0.4%
Published
Feb 19, 2026
CISA due date
—
The record
Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Training Consulting Ltd. Databank Accreditation Software allows SQL Injection. This issue affects Databank Accreditation Software: before 2026/04.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-84650 In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be… CWE-566
- CVE-2026-21886 OpenCTI is an open source platform for managing cyber threat intelligence knowledge and… CWE-566
- CVE-2025-61781 GraphQL IDOR allows authenticated user to delete workspace content of other users CWE-566