TSG CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL TSG CVE published 2026-10-16

CVE-2026-111472

A critical SQL injection vulnerability was discovered in TSG Profleet, allowing potential attackers to manipulate database data by sending a crafted GET request to the '/cgi-bin/index.php' endpoint. The vulnerability, tracked as CVE-2026-111472, has a CVSS score of 9.3, indicating a high severity level. The CVE record was published on 2026-10-16T09:17:04.410Z and has not been modified since then. The NVD [truncated]