cve.nowby Sazabi
← All vulnerabilities
CVE-2026-111472

SQL injection in TSG Profleet

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 16/10/2026
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.

Affected versions

  • TSG Profleet

    fixed in 16/10/2026

References 1

incibe.es