PatchSiren cyber security CVE debrief
CVE-2025-9953 DATABASE Software Training Consulting Ltd. CVE debrief
CVE-2025-9953 is a critical vulnerability in DATABASE Software Training Consulting Ltd.'s Databank Accreditation Software, allowing for SQL injection attacks. The vulnerability has a CVSS score of 9.8 and was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2025-9953). The affected software version is through 19022026. The vendor did not respond to early disclosure. For more information, see [resourceLinkAnnotations](https://nvd.nist.gov/vuln/detail/CVE-2025-9953).
- Vendor
- DATABASE Software Training Consulting Ltd.
- Product
- Databank Accreditation Software
- CVSS
- CRITICAL 9.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-02-19
- Original CVE updated
- 2026-06-05
- Advisory published
- 2026-02-19
- Advisory updated
- 2026-06-05
Who should care
Users of Databank Accreditation Software through version 19022026 should prioritize patching this vulnerability to prevent potential SQL injection attacks.
Technical summary
CVE-2025-9953 is an Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in Databank Accreditation Software. This issue allows attackers to inject SQL, potentially leading to unauthorized data access or modification. The vulnerability's CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a high severity.
Defensive priority
High
Recommended defensive actions
- Apply patches or updates provided by the vendor to address the vulnerability.
- Implement additional security measures, such as input validation and sanitization, to prevent SQL injection attacks.
- Monitor systems for suspicious activity and review logs regularly.
Evidence notes
The CVE record [cve-org](https://www.cve.org/CVERecord?id=CVE-2025-9953) and NVD detail [nvd](https://nvd.nist.gov/vuln/detail/CVE-2025-9953) provide further information on this vulnerability.
Official resources
CVE-2025-9953 was published on 2026-02-19T12:16:15.707Z and modified on 2026-06-05T12:16:35.740Z.