PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-105412 Dassault Systèmes CVE debrief

CVE-2026-105412 is a SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5. This vulnerability could allow an attacker to have read access to the Tuleap database. Defenders should prioritize verifying exposure of Tuleap Enterprise Edition 17.5 instances, monitoring database access for suspicious activity, and applying vendor-provided security advisories. The CVE record and NVD detail page provide limited information about the vulnerability, so defenders should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Vendor
Dassault Systèmes
Product
Tuleap Enterprise Edition
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-12
Original CVE updated
2026-10-12
Advisory published
2026-10-12
Advisory updated
2026-10-12

Who should care

Defenders responsible for Tuleap Enterprise Edition instances should assess exposure and prioritize remediation. This includes operators, platform administrators, vulnerability management teams, and security teams. They should verify Tuleap Enterprise Edition version 17.5 instances for exposure, review and apply vendor-provided security advisories, and monitor database access for suspicious activity.

Why it matters

CVE-2026-105412 is a SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5, allowing potential read access to the Tuleap database. Defenders should prioritize verifying exposure, monitoring database access, and applying vendor-provided security advisories.

  • Verify exposure of Tuleap Enterprise Edition 17.5 instances
  • Monitor database access for suspicious activity
  • Apply vendor-provided security advisories

Technical summary

An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access to the Tuleap database. This vulnerability is related to the Tuleap Enterprise Edition 17.5 product. Defenders should prioritize verifying exposure of Tuleap Enterprise Edition 17.5 instances and apply vendor-provided security advisories. The vulnerability allows potential read access to the Tuleap database.

Defensive priority

Defenders should prioritize verifying exposure of Tuleap Enterprise Edition 17.5 instances.

Recommended defensive actions

  • Verify Tuleap Enterprise Edition version 17.5 instances for exposure
  • Review and apply vendor-provided security advisories
  • Monitor database access for suspicious activity

Evidence notes

The CVE record and NVD detail page provide limited information about the vulnerability. Evidence is limited to CVE Program and NVD records. Defenders should verify Tuleap Enterprise Edition version 17.5 instances for exposure and review vendor-provided security advisories. The official CVE Program record and NVD detail page offer source-provided CVE metadata and official vulnerability assessment.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-105412 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-105412

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-105412 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-105412

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.