Dav-ee CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW Dav-ee CVE published 2026-10-19

CVE-2026-112089

A SQL injection vulnerability was detected in the Dav-ee dairy-management-system, specifically in the mysqli_query function of the employees/delete.php file. The vulnerability is triggered by manipulating the e_payroll_no argument. The attack can be initiated remotely, and the exploit has been publicly disclosed. The product uses a rolling release model, making specific version information for affected or [truncated]