CVE-2026-70371 | Koha Community up to 24.11.16/25.05.11/25.11.5/26.05.0 Reports issues_avg_stats.pl calculate Column sql injection

A vulnerability described as critical has been identified in Koha Community Koha up to 24.11.16/25.05.11/25.11.5/26.05.0. Affected is the function calculate of the file reports/issues_avg_stats.pl of the component Reports Module. The manipulation of the argument Column results in sql injection.

This vulnerability is cataloged as CVE-2026-70371. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More