Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection.
…

A SQL injection vulnerability (CVE-2026-4978) has been identified in the UMAI Vision Traffic Analysis System. The flaw involves improper neutralization of special elements used in SQL commands, allowing attackers to perform SQL injection attacks. The vulnerability affects Traffic Analysis System versions from 30 up to (but not including) version 34. The issue is tracked under CWE for improper neutralization of SQL special elements. Users are advised to upgrade to version 34 or later to remediate the vulnerability. The advisory was published by both NVD (NIST) and the Turkish cybersecurity authority siberguvenlik.gov.tr. No additional exploitation details or proof-of-concept code are mentioned in the available sources.