CVE-2026-40546

Vulnerability Description

SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database.

This issue affects SOPlanning version 1.55 and below.

Vulnerability Details

Published Date

June 01, 2026

Last Modified

June 01, 2026

CWE ID

CWE-89

Source

NVD

Vendor

SOPlanning

Product

SOPlanning

External References

https://cert.pl/en/posts/2026/06/CVE-2026-40543
https://www.soplanning.org/en/

CVE-2026-40546

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment