CVE-2026-111472

TSG Profleet

Prioridad media: es grave, pero no se conoce explotación

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.

En las noticias

• Inyección SQL en Profleet de TSG · INCIBE-CERT