KKoha Community

Products

Exploited and recent CVEs

• CVE-2026-105107 High 7.6 Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parameters 0.3%
• CVE-2026-105106 High 8.8 Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled task 1.9%
• CVE-2026-41921 Medium 5.4 Koha Stored XSS via Purchase Suggestion Handler 0.3%
• CVE-2026-72610 Medium 4.3 Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip Generation 0.3%
• CVE-2026-72609 High 7.1 Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.pl 0.4%
• CVE-2026-72608 Medium 6.5 Koha Community Koha - Stored SQL Injection via Patron Card Layout image_name 0.4%
• CVE-2026-72607 High 7.1 Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age 0.5%
• CVE-2026-71288 High 8.8 Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl 0.5%
• CVE-2026-70373 High 8.8 Koha - SQL Injection in reports/issues_stats.pl 0.6%
• CVE-2026-70372 High 8.8 Koha - SQL Injection in reports/bor_issues_top.pl 0.6%
• CVE-2026-70371 High 8.8 Koha - SQL Injection in reports/issues_avg_stats.pl 0.6%
• CVE-2026-70370 High 8.8 Koha - SQL Injection in reports/catalogue_stats.pl 0.6%
• CVE-2026-70369 High 8.8 Koha - SQL Injection in reports/acquisitions_stats.pl 0.6%
• CVE-2026-6428 High 7.6 Koha SQL Injection in reports/catalogue_out.pl via Filter URL Parameter 0.2%
• CVE-2026-31844 High 8.8 Authenticated SQL Injection in Koha displayby parameter of suggestion.pl 0.4%