PatchSiren

JTL SW GmbH CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL JTL SW GmbH CVE published 2026-10-14

CVE-2026-89310

A SQL Command Injection Vulnerability exists in JTL-WMS, allowing remote attackers to execute arbitrary SQL statements. The vulnerability is due to a parameter from the request body being inserted into a T-SQL statement without parameterization or escaping. This issue can lead to data breaches or system compromise. Defenders should assess exposure and verify patching to prevent potential SQL injection att [truncated]