Product
An unauthenticated SQL injection vulnerability (CVE-2026-12718) exists in KarelIPS, allowing potential data exfiltration via backend database manipulation.