High severityNVD Advisory· Published Jun 1, 2026· Updated Jun 1, 2026
CVE-2026-40546
CVE-2026-40546
Description
SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database.
This issue affects SOPlanning version 1.55 and below.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.55
Patches
Vulnerability mechanics
References
2News mentions
1- Soplanning: Seven Vulnerabilities Disclosed, Including SQLi and Auth BypassVypr Intelligence · Jun 1, 2026