PatchSiren

Zalktis Programmas (SIA "Zalktis Programmas") CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Zalktis Programmas (SIA "Zalktis Programmas") CVE published 2026-08-13

CVE-2026-59109

The CVE-2026-59109 record describes a SQL injection vulnerability in the Zalktis accounting application. This vulnerability occurs when trading-partner-controlled text fields in received electronic invoices are improperly handled, allowing an attacker to inject malicious SQL code and alter query logic. The vulnerability affects Zalktis versions before 2026.1.586 and before 2026.2.592. Organizations using [truncated]