CVE-2026-111038

The Coupa Supplier Portal SaaS platform is susceptible to a CSV formula injection vulnerability within its export functionality. The root cause is the lack of proper validation or sanitization of user-controlled data, specifically event names or templates within the Tenders module , before they a...