CVE-2026-105107 | Koha Community up to 26.05.2 Reports cat_issues_top.pl calculate criteria/filter/limit sql injection

October 14, 2026 Yanac

A vulnerability was found in Koha Community Koha up to 24.10.x/24.11.18/25.05.13/25.11.7/26.05.2 and classified as critical. This vulnerability affects the function calculate of the file reports/cat_issues_top.pl of the component Reports Module. Such manipulation of the argument criteria/filter/limit leads to sql injection.

This vulnerability is traded as CVE-2026-105107. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More