CVE-2026-1198

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in “Obroty na kontach” window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed.
This issue was fixed in 6.30@A04.4_u06.

More information : https://cert.pl/posts/2026/02/CVE-2026-1198