Log in Start free

Koha

Products

ProductCVEsExploitedLatest
Koha3–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-19780 High 8.8 Koha Eval Code Injection Remote Code Execution Vulnerability 1.0%
  • CVE-2025-30076 High 7.7 Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter. 0.4%
  • CVE-2025-22954 Critical 10.0 GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter. 25.6%