CVE-2026-6428

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-6428

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6428.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-6428

Published

2026-06-13T16:34:10Z

Modified

2026-10-28T03:01:13Z

Severity

5.6 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/AU:Y/V:C/U:Amber CVSS Calculator

Summary

Koha SQL Injection in reports/catalogue_out.pl via Filter URL Parameter

Details

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/.

Database specific

{
    "cna_assigner": "TuranSec",
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6428.json"
}

References

Affected packages

Git / gitlab.com/koha-community/Koha

Affected ranges

Type

GIT

Repo

https://gitlab.com/koha-community/Koha

Events

Introduced

Last Affected

240e17db074c0990243bd17531eab7dee1435bd7

Last Affected

1dbc309e9fead73bc11070ebe5da2c1dbe1f1489

Introduced

dd76c6bcdc4432d7f1ff900873b09116dc258f44

Last Affected

3f0d2d4443e467a64d929a62d6effeb14a36bf9c

Introduced

b16e2059a94cf8f803c5687460e73ccf6c85a5f0

Last Affected

76e3b6ec9208bd73183df94f856d027b0bbe9df8

Introduced

3f2987eb19f7ac1987591d8e9b01961c39405b39

Last Affected

278eb6a8c928fe94f5ed2bbf3b01111722a3ffc8

Introduced

e4bb3afa5bc1a9951438c1963b12a27b5d16980c

Last Affected

dacce7d3fc15860d26d06444c1f5c9a2d0d6a4a9

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "22.11.38"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "introduced": "25.05.00"
                },
                {
                    "last_affected": "25.05.11"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "introduced": "23.05.00"
                },
                {
                    "last_affected": "23.11.15"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "introduced": "24.05.00"
                },
                {
                    "last_affected": "24.11.16"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "introduced": "25.11.00"
                },
                {
                    "last_affected": "25.11.05"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "introduced": "26.05.00"
                },
                {
                    "last_affected": "26.05.01"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        }
    ]
}

Affected versions

Other

R_1-2-2RC4

R_1-3-0

R_1-3-1

R_1-3-2

R_1-3-3

R_1-9-0

R_1-9-1

R_1-9-2

R_1-9-3

R_2-0-0RC1

R_2-0-0pre1

R_2-0-0pre2

R_2-0-0pre3

R_2-0-0pre4

R_2-0-0pre5

R_2-1

R_2-4

v16.*

v16.05.00

v16.05.00-beta

v16.11.00

v17.*

v17.05.00

v17.11.00

v18.*

v18.05.00

v18.05.00-rc1

v18.11.00

v19.*

v19.05.00

v19.11.00

v20.*

v20.05.00

v20.11.00

v21.*

v21.05.00

v21.11.00

v22.*

v22.05.00

v22.11.00

v22.11.01

v22.11.02

v22.11.03

v22.11.04

v22.11.05

v22.11.05-1

v22.11.06

v22.11.07

v22.11.08

v22.11.09

v22.11.10

v22.11.11

v22.11.12

v22.11.13

v22.11.14

v22.11.15

v22.11.17

v22.11.19

v22.11.20

v22.11.20-2

v22.11.21

v22.11.22

v22.11.23

v22.11.24-1

v22.11.25-1

v22.11.26-1

v22.11.27-1

v22.11.28-1

v22.11.29-1

v22.11.30-1

v22.11.32-1

v22.11.33-1

v22.11.33-2

v22.11.34-1

v22.11.35-1

v22.11.36-1

v22.11.37-1

v22.11.38-1

v23.*

v23.05.00

v23.11.00

v23.11.01

v23.11.02

v23.11.03

v23.11.04

v23.11.04-4

v23.11.05

v23.11.06

v23.11.06-1

v23.11.07

v23.11.08

v23.11.08-1

v23.11.09

v23.11.10

v23.11.11

v23.11.12-1

v23.11.13-1

v23.11.14-1

v23.11.15-1

v24.*

v24.05.00

v24.11.00

v24.11.01

v24.11.02-1

v24.11.03-2

v24.11.03-3

v24.11.04-1

v24.11.05-1

v24.11.06-1

v24.11.07-1

v24.11.08-1

v24.11.08-2

v24.11.08-3

v24.11.09-1

v24.11.10-2

v24.11.11-1

v24.11.11-2

v24.11.12-1

v24.11.13-1

v24.11.14-1

v24.11.16-2

v25.*

v25.05.00-1

v25.05.01-1

v25.05.02-1

v25.05.02-2

v25.05.03-1

v25.05.04-1

v25.05.05-1

v25.05.05-2

v25.05.06-2

v25.05.07-1

v25.05.08-2

v25.05.08-3

v25.05.09-2

v25.05.09-3

v25.05.09-4

v25.05.10-1

v25.05.11-1

v25.11.00

v25.11.00-1

v25.11.00-2

v25.11.01-1

v25.11.01-2

v25.11.02-1

v25.11.03-1

v25.11.03-2

v25.11.04-1

v25.11.05-1

v26.*

v26.05.00

v26.05.01

v26.05.01-1

v3.*

v3.00.00

v3.00.00-alpha

v3.00.00-beta

v3.00.00-beta2

v3.00.00-stableRC1

v3.02.00-alpha

v3.02.00-alpha2

v3.02.00-beta

v3.04.00

v3.08.00

v3.12.00-alpha

v3.12.00-alpha2

v3.12.00-beta1

v3.14.00-alpha1

v3.14.00-alpha2

v3.14.00-beta

v3.16.00

v3.16.00-beta

v3.16.00-rc

v3.18.00

v3.18.00-beta

v3.20.00

v3.20.00-beta

v3.22.00

v3.22.00-beta

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6428.json"