CVE-2026-40546 — Multiple SQL Injections in SOPlanning

CVE-2026-40546

Multiple SQL Injections in SOPlanning PUBLISHED

Description (CNA)

SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database. This issue affects SOPlanning version 1.55 and below.

Affected (CNA)

Vendor / product	Versions
SOPlanning / SOPlanning	affected 0 through 1.55

CWE

CWE-89

References

https://cert.pl/en/posts/2026/06/CVE-2026-40543
https://www.soplanning.org/en/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.