VULNERABILITY INTELLIGENCE
CVE-2026-1198
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-02-26
Last modified2026-06-17
Description
SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in 6.30@A04.4_u06.
Weakness classification
- cvd@cert.pl: CWE-89