Critical severity9.8NVD Advisory· Published Oct 14, 2025· Updated Jun 5, 2026

CVE-2025-10610

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure allows Blind SQL Injection.

This issue affects Winsure: through Version dated 21.08.2025.

Affected products

SFS Consulting Information Processing Industry and Foreign Trade Inc./ww.Winsurellm-fuzzy
Range: <=21.08.2025

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0337nvd
www.usom.gov.tr/bildirim/tr-25-0337nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000