critical9.0
CVE-2026-72510
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.
Impact
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.