CVE-2026-1198

HIGH

SQL Injection in SIMPLE.ERP

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-1198 has a selected CVSS score of 8.6 (high).

Description

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in 6.30@A04.4_u06.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 26, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Simple.ERP

Browse Simple SA / Simple.ERP

Default status: unaffected

CVE ListBefore 6.30@A04.4_u06affected

References

3