SQL Injection Vulnerability in SOPlanning by SOPlanning
CVE-2026-50644

8.6HIGH

Key Information:

Vendor

Soplanning

Status
Soplanning
Vendor
CVE Published:
9 July 2026

What is CVE-2026-50644?

SOPlanning is susceptible to SQL injection vulnerabilities within the audit retention configuration. Attackers with the necessary rights can manipulate SQL commands via the audit configuration form, leading to potential unauthorized access or data manipulation. This vulnerability is triggered when the audit functionality is accessed, either by the attacker or other users. The issue has been resolved in version 1.56.01, highlighting the importance of regular updates and security patch management.

Affected Version(s)

SOPlanning 0 < 1.56.01

References

https://cert.pl/en/posts/2026/07/CVE-2026-50644
third-party-advisory
https://www.soplanning.org/en/
product

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Arkadiusz Marta
.