CVE-2026-70370 | Koha Community up to 24.11.16/25.05.11/25.11.5/26.05.0 Reports catalogue_stats.pl calculate Line/Column sql injection

A vulnerability marked as problematic has been reported in Koha Community Koha up to 24.11.16/25.05.11/25.11.5/26.05.0. This impacts the function calculate of the file reports/catalogue_stats.pl of the component Reports Module. The manipulation of the argument Line/Column leads to sql injection.

This vulnerability is listed as CVE-2026-70370. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More