CVE-2026-40522
Published Jun 29, 2026FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement report handler that allows authenticated attackers to extract arbitrary database data by…
- evidence mentions
- 4
- Buzz score
- 25.6