CVE-2025-7631

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software allows SQL Injection. This issue affects Tumeva Prime News Software: from v.1.0.1 before v1.0.2.

• CWE-89

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0067
• https://www.usom.gov.tr/bildirim/tr-26-0067

Published

Feb 17, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7624An SQL injection vulnerability in the legacy (transparent) S…9.8
• CVE-2025-7625A vulnerability, which was classified as critical, was found…4.3
• CVE-2025-7626A vulnerability has been found in YiJiuSmile kkFileViewOffic…7.5
• CVE-2025-7627A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit…9.8
• CVE-2025-7628A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit…8.1
• CVE-2025-7630Improper Restriction of Excessive Authentication Attempts, I…5.3
• CVE-2025-7632Zohocorp ManageEngine Exchange Reporter Plus versions 5723 a…5.4
• CVE-2025-7633Zohocorp ManageEngine Exchange Reporter Plus versions 5723 a…6.1
• CVE-2025-7634The WP Travel Engine – Tour Booking Plugin – Tour Operator S…9.8
• CVE-2025-7635Unauthenticated Telnet access vulnerability in Calix GigaCen…7.7
• CVE-2025-7636Improper Neutralization of Special Elements used in an SQL C…8.8
• CVE-2025-7638The Forminator Forms – Contact Form, Payment Form & Custom F…4.9