CVE-2026-1198

8.6 highEPSS 0.3%

High (8.6). EPSS 0.3% chance of exploitation in the next 30 days.

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in 6.30@A04.4_u06.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://cert.pl/posts/2026/02/CVE-2026-1198
https://simple.com.pl/

Check your stack JSON