CVE-2026-111038 | Coupa Total Spend Management Platform Tenders export code injection

A vulnerability marked as critical has been reported in Coupa Total Spend Management Platform. Impacted is the function export of the component Tenders Module. This manipulation causes code injection.

The identification of this vulnerability is CVE-2026-111038. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More