CVE-2026-111472
CVE-2026-111472 · SQL injection in TSG Profleet
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.
CVSS 9.3 · Critical · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
profleet
- Versions
- ≥ 0, < 16/10/2026: Affected (custom)
Update to 16/10/2026