CVE-2026-2395Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-07-22: 3Patch / Workaround · 2026-07-22: 1Technical Details · 2026-07-22: 307-22
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
By indicator
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-2395 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows … https://www.cve.org/CVERecord?id=CVE-2026-2395

    Post summary

    The text briefly describes CVE-2026-2395 as an SQL injection vulnerability in Xpoda Türkiye Informatics Technology Inc.'s No Code Platform and includes a link to the CVE record.

    00010672
    57.8K followersView on X
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-2395 — CVSS 9.8/10 ██████████ Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/4ivrSNA8fi

    Post summary

    A critical SQL injection vulnerability (CVE-2026-2395) in Xpoda Türkiye has been disclosed with a CVSS score of 9.8/10, and a patch has been announced.

    1000054
    69 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-2395 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows … https://www.cve.org/CVERecord?id=CVE-2026-2395 ----- Traducción: CVE-2026-2395 Neu… http://infoflow.cloud`

    Post summary

    The tweet announces CVE-2026-2395, an SQL injection flaw in Xpoda Türkiye Informatics Technology Inc. No Code Platform, providing a brief technical description and a link to the CVE record.

    0000029
    94 followersView on X

Explore more