Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module.
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.00849·Published 2026-03-10·Fixed in 2.10.2CWE-89