Multiple SQL Injection Vulnerabilities in Worklenz Project Management Tool

CVE-2026-25947

What is CVE-2026-25947?

The Worklenz project management tool has been found to contain multiple SQL injection vulnerabilities affecting various backend functionalities, including project and task management controllers, reporting endpoints, financial data handling, real-time socket.io interactions, and resource scheduling features. These issues allow for unauthorized database access and manipulation before the release of version 2.1.7, which includes patches to address these critical security flaws. Users are strongly encouraged to update to the latest version to safeguard against potential exploits.

References