CVE-2026-1198

N/A

Description

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in 6.30@A04.4_u06.

CVE Details

CVSS v3.1 ScoreN/A

Published2/26/2026

Last Modified2/27/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-89

References

https://cert.pl/posts/2026/02/CVE-2026-1198(cvd@cert.pl)

https://simple.com.pl/(cvd@cert.pl)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.