Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: JTL-WMS — jtl-software.com/de/cve-2026-89309-cve-2026-89310 Clear all filters
TI-2026-73773 CVE-2026-89310 · GHSA-rgrc-89rr-p923

SQL injection in JTL-WMS lets remote attackers run SQL statements

Priority MEDIUM 43

A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00467 Published 2026-10-14 Fixed in 2.0.7, 2.1.3 +1 CWE-89