CVE-2026-111472 — SQL injection in TSG Profleet
An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by se…
Published: 2026-10-16 · CVSS: 9.3 · CVSS 4.0
An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7