CVE-2026-40524

CVE-2026-40524 affects FrontAccounting

PT-2026-46897

Name of the Vulnerable Software and Affected Versions OpenMeter affected versions not specified Description An authenticated tenant can perform SQL injection through the valueProperty or groupBy fields of the 'POST /api/v1/meters' endpoint. The issue occurs because the application uses string...

PT-2026-43629

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 1.7.18 Pimcore versions prior to 2.3.6 Description A SQL injection issue exists in the translation grid date filter of the Admin Classic Bundle. The application fails to properly parameterize or validate the property...

CRITICAL-SEVERITY-VULNERABILITY-REPORT-Widespread-SQLI

CRITICAL-SEVERITY-VULNERABILITY-REPORT-Widespread-SQLI CRITIC...