Login Request a demo
Critical severity · published Feb 4, 2026
CVE-2025-5329
SQLi in Martcode Software's Delta Course Automation
9.8
CVSS
0.5%
EPSS
No
On KEV
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection. This issue affects Delta Course Automation: through 04022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DC
Delta Course Automation · Martcode Software Inc.
through 04022026 · source: vendor
Affected product
DC
Delta Course Automation
Martcode Software Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5329
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5329
siberguvenlik.gov.tr
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0018
www.usom.gov.tr
https://www.usom.gov.tr/bildirim/tr-26-0018