TSG vulnerabilities
Published CVEs affecting TSG products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-111472
Critical · 9.3
CWE-89 Oct 16, 2026
SQL injection in TSG Profleet
An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.