CVE-2026-40546

Vulnerability Description

SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database. This issue affects SOPlanning version 1.55 and below.

Related Weaknesses (CWE)

CWE-89

References

https://cert.pl/en/posts/2026/06/CVE-2026-40543
https://www.soplanning.org/en/

FAQ

What is CVE-2026-40546?

CVE-2026-40546 is a documented vulnerability. SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database. ...

How severe is CVE-2026-40546?

CVSS scoring is not yet available for CVE-2026-40546. Check NVD for updates.

Is there a patch for CVE-2026-40546?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.