CVE-2026-1198

N/A

Descricao

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in 6.30@A04.4_u06.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/26/2026

Ultima modificacao2/27/2026

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-89

Referencias

https://cert.pl/posts/2026/02/CVE-2026-1198(cvd@cert.pl)

https://simple.com.pl/(cvd@cert.pl)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.