[ Vendor · 2 CVEs ]
Koha Community
CVEs affecting Koha Community published in the last 30 days, plus any Koha Community CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105106 | 14 Oct 2026 | CVSS 8.8 | Koha Community KohaKoha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter… | |
| CVE-2026-105107 | 14 Oct 2026 | CVSS 7.6 | Koha Community KohaKoha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.pl script (sub calculate) concatenates the… |