CVE-2026-1198: Simple Sa Simple.erp

High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days.

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in 6.30@A04.4_u06.

Affected products

Published 2026-02-26. Last modified 2026-06-17.