Critical SQL Injection Vulnerability in UMAI Vision Traffic Analysis System (CVE-2026-4978)

A critical SQL injection vulnerability, CVE-2026-4978, has been identified in the UMAI Vision Traffic Analysis System, affecting versions 30 to 33. This flaw allows unauthenticated attackers to execute arbitrary SQL commands remotely, leading to potential unauthorized access, data modification, or deletion. The vulnerability has been assigned a CVSS score of 9.8, indicating its critical severity. Currently, there is no evidence of active exploitation or public proof-of-concept. A patch is available for users to upgrade to a version beyond 33. Security experts recommend implementing network-level access controls and monitoring database query logs for suspicious activity. Organizations using the affected system are urged to take immediate action to mitigate risks.

Key Points: • CVE-2026-4978 is a critical SQL injection vulnerability with a CVSS score of 9.8. • The vulnerability affects UMAI Vision Traffic Analysis System versions 30 to 33. • No evidence of active exploitation has been reported, but immediate patching is recommended.