A SQL injection vulnerability has been identified in Teracity Software Technologies Inc. E-OSB product. The vulnerability is classified as an improper neutralization of special elements used in SQL commands. It allows attackers to perform SQL injection attacks against affected installations. All versions of E-OSB prior to V02.26.07.08.01 are affected. The issue has been assigned CVE-2026-18765 and reported via the Turkish cybersecurity authority. Users are advised to update to version V02.26.07.08.01 or later to mitigate the risk. The vulnerability poses a high risk due to the potential for unauthorized database access and data manipulation.
