CRITICAL 9.3 NVD

CVE-2026-111472

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from t

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.

References

Published: 2026-10-16 · Source: NVD · Feed updated: 2026-10-16
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-10-16 via NVD.

Risk Timeline

CVE Disclosed2026-10-16 · -1 days ago

Remediation Resources

Analysis & PoC
www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-tsg-profleet
vulnfeed aggregates 16278 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.