CVSS 9.83 sources verified·1 min read
By Lyrie Threat Intelligence·6/3/2026
CRITICAL: CVE-2024-0857 (CVSS 9.8) — uni-yaz flexwater corporate water management
CVE: CVE-2024-0857
CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL
Status: Critical advisory
Affected
- uni-yaz flexwater corporate water management
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection.
This issue affects FlexWater Corporate Water Management: before 5.452.0.
Verified Sources
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1011
- https://www.usom.gov.tr/bildirim/tr-24-1011
- https://www.usom.gov.tr/bildirim/tr-24-1011
_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._
Lyrie Verdict
A vulnerability of this severity is exactly what Lyrie's anti-rogue-AI defense is built for: continuous, autonomous monitoring that doesn't wait for human reaction time.
Validated sources
- [1]NVD
- [2]GitHub Advisory
- [3]MITRE