CVE-2026-113407 | YS-infoware BA-Workflow 3.6 sql injection

October 20, 2026 Yanac

A vulnerability, which was classified as critical, has been found in YS-infoware BA-Workflow 3.6. This vulnerability affects unknown code. This manipulation causes sql injection.

The identification of this vulnerability is CVE-2026-113407. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More

CVE-2026-113466 | MinIO up to RELEASE.2025-10-15T17-29-55Z Embedded Console cmd/common-main.go globalDeploymentID/SessionTokenAuthenticate hard-coded key
CVE-2026-113406 | YS-infoware BA-Workflow up to 3.5 sql injection