5 matches found
CVE-2026-26379
Koha library automation management system versions up to 25.11 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the Z39.50/SRU server configuration . This flaw allows authenticated attackers to perform internal network scanning and identify active services by analyzing server...
PT-2026-46041
Name of the Vulnerable Software and Affected Versions Koha versions prior to 25.11 Description A Cross Site Scripting XSS issue exists where a remote attacker can execute arbitrary code through the file upload function within the Invoice features. Recommendations Update to version 25.11 or later...
CVE-2026-26377
Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function...
