CVE-2026-50644

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parameters_all rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed (by the attacker or another user). This issue was fixed in version 1.56.01.

• CWE-89

• https://cert.pl/en/posts/2026/07/CVE-2026-50644
• https://www.soplanning.org/en/

Published

Jul 9, 2026

Last Modified

Jul 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50638Metrics::Any::Adapter::DogStatsd versions before 0.04 for Pe…9.1
• CVE-2026-50639Metrics::Any::Adapter::SignalFx versions before 0.04 for Per…6.5
• CVE-2026-5064Potential security vulnerabilities have been identified in t…8.5
• CVE-2026-50641Streamsoft Business Intelligence (BI) stores users' password…7.1
• CVE-2026-50642diff‑so‑fancy does not properly sanitize non‑SGR terminal co…4.8
• CVE-2026-506438cc is vulnerable to an Out‑of‑Bounds Read due to improper h…5.1
• CVE-2026-50645There is no restriction on the amount of attachment headers …7.5
• CVE-2026-50646Protection mechanism failure in .NET Framework allows an una…7.8
• CVE-2026-50647Loop with unreachable exit condition ('infinite loop') in Ac…7.5
• CVE-2026-50648Allocation of resources without limits or throttling in .NET…7.5
• CVE-2026-50649Deserialization of untrusted data in .NET allows an unauthor…7.8
• CVE-2026-5065IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains h…8.8