A SQL injection vulnerability has been identified in Teracity Software Technologies Inc.'s E-OSB product. The vulnerability is classified as an improper neutralization of special elements used in SQL commands (CWE-89). It allows attackers to perform SQL injection attacks against affected installations. All versions of E-OSB prior to V02.26.07.08.01 are affected. The vulnerability has been assigned CVE-2026-18765 and is published on the NVD. Users are advised to upgrade to version V02.26.07.08.01 or later to remediate the issue. The advisory was also published by the Turkish cybersecurity authority siberguvenlik.gov.tr. The criticality has been assessed as High given the nature of SQL injection vulnerabilities.
