{"id":"CVE-2026-111472","published":"2026-10-16T09:17:04.410","lastModified":"2026-10-16T15:19:36.177","description":"An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-tsg-profleet","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}