What’s Vulnerable › Vulnerabilities

CVE-2025-7631: Time-Based Blind SQLi in Tumeva Internet Technologies' Tumeva Prime News Software

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-17 · updated 2026-06-17
• Weakness: CWE-89

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software allows SQL Injection. This issue affects Tumeva Prime News Software: from v.1.0.1 before v1.0.2.

Affected products

• Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News S: from v.1.0.1 before v1.0.2 — fixed in v1.0.2

How to fix

Upgrade to a fixed version: Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News S v1.0.2. Check the vendor advisory for mitigations.

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0067
• https://www.usom.gov.tr/bildirim/tr-26-0067

Get alerted when CVE-2025-7631 or the next vulnerability affects your stack