PT-2026-46041

Name of the Vulnerable Software and Affected Versions Koha versions prior to 25.11 Description A Cross Site Scripting XSS issue exists where a remote attacker can execute arbitrary code through the file upload function within the Invoice features. Recommendations Update to version 25.11 or later...

CVE-2026-26379

CVE-2026-26379 affects Koha v0: Koha v.25.11 and earlier, where the Z39.50 configuration module is the entry point. The issue enables a remote attacker to execute arbitrary code. The available sources do not specify the underlying root cause details or exact vulnerable file/function, nor do they ...

CVE-2026-26377

Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function...

EUVD-2015-4649

Malware in sbrugna...

EUVD-2014-1986

Malware in sbrugna...