CVE-2026-113405 | YS-infoware BA-Workflow up to 3.5 sql injection

October 20, 2026 Yanac

A vulnerability classified as critical has been found in YS-infoware BA-Workflow up to 3.5. Affected by this issue is some unknown functionality. The manipulation leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-113405. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More