Karel Electronic Industry and Trade Inc.

An unauthenticated SQL injection vulnerability (CVE-2026-12718) exists in KarelIPS, allowing potential data exfiltration via backend database manipulation.