TI-2026-75486 CVE-2026-111700 · GHSA-5hxh-2p25-4hxpSQL injection in WebVella ERP EQL query APIPriority MEDIUM 64WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.0027 · Published 2026-10-16 · No fix listed CWE-89