CVE-2026-26378

概要

参考情報

• g03m0n.github.io · Third Party Advisory
• g03m0n.github.io/posts/cve-2026-26378 · Exploit
• Koha-Community/Koha · Product

koha のその他の脆弱性

• CVE-2026-50767中 5.4A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System 0 through 25.11 ver…
• CVE-2026-50766中 5.4A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions al…
• CVE-2026-50765中 6.1A stored cross-site scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System 0 thr…
• CVE-2026-26379中 6.5Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows au…
• CVE-2026-31844高 8.8An authenticated SQL Injection vulnerability (CWE-89) exists in the Koha staff interface in the /cgi-bin/koha/suggestion/suggestion.pl endpo…