CVE-2026-72510
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.
- Published Sep 29, 2026
- CVSS 8.5 high
- 0.3% chance of exploitation in the next 30 days (EPSS)
Affected software
In the news
- Toptech TMS7 and TopHAT CISA ยท