CVE-2026-71288 | Koha Community up to 26.05.01-1 Guided Report Builder guided_reports.pl order_by sql injection

A vulnerability, which was classified as critical, was found in Koha Community Koha up to 26.05.01-1. This affects an unknown part of the file reports/guided_reports.pl of the component Guided Report Builder. Such manipulation of the argument order_by leads to sql injection.

This vulnerability is traded as CVE-2026-71288. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More