CVE-2025-6830: Xpoda Türkiye Information Technology Inc Password Module

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpoda Türkiye Information Technology Inc. Password Module allows SQL Injection. This issue affects Password Module: through 11022026.

Affected products

• Xpoda Türkiye Information Technology Inc Password Module: up to and including 11022026

Published 2026-02-09. Last modified 2026-06-17.