CVE-2026-70372 | Koha Community up to 24.11.16/25.05.11/25.11.5/26.05.0 Reports bor_issues_top.pl calculate Criteria/Filter/Limit sql injection (EUVD-2026-52674)

August 4, 2026 Yanac

A vulnerability was found in Koha Community Koha up to 24.11.16/25.05.11/25.11.5/26.05.0. It has been declared as problematic. This issue affects the function calculate of the file reports/bor_issues_top.pl of the component Reports Module. The manipulation of the argument Criteria/Filter/Limit results in sql injection.

This vulnerability was named CVE-2026-70372. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More