CVE-2026-4104: SQLi in Akmer Informatics' TeknoPass

Synopsis

SQL injection via user-controlled primary key in Akmer Informatics TeknoPass, an industrial automation and access-management product. The vulnerability is reachable over the network with no authentication required and no user interaction needed, making it trivially exploitable by any remote attacker. Successful exploitation gives an attacker full read, write, and denial-of-service capability against the underlying database. HarborGuard is tracking this advisory and will make a patched-image rebuild available the moment an upstream fix is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable endpoint is exposed over the network; an attacker must be able to reach the TeknoPass service via a standard network connection to send a malicious request.

• AuthenticationNot required

  No account or session credential is needed; the injection point is reachable by any unauthenticated HTTP request.

• Victim interactionNot required

  The attacker does not need to trick or wait for any user action; the exploit is fully self-contained on the attacker side.

• Attack complexityDetail

  Exploitation is reliable and condition-free; no race conditions, memory-layout knowledge, or environmental setup are required to trigger the SQL injection.

Blast Radius

• Reads arbitrary rows from the database, including stored credentials, session tokens, and any user or operational records held by TeknoPass.
• Modifies or deletes persisted database rows, allowing an attacker to alter access-control records, tamper with audit logs, or corrupt configuration data.
• Crashes or degrades database availability, disrupting the TeknoPass service and any industrial or physical-access processes that depend on it.
• Depending on database configuration, may allow out-of-band data exfiltration or execution of database-level commands that extend attacker reach beyond the application tier.