{"vulnerability": "CVE-2026-111472", "sightings": [{"uuid": "4711a274-89fa-48bf-8b75-cb08e1f360f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-111472", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxyophm3y42l", "content": "TSG Profleet hit by CRITICAL SQL injection (CVSS 9.3). Attackers can alter database via the \u2018Identificaci\u00f3n\u2019 parameter. Restrict access & use WAF rules until patched. https://radar.offseq.com/threat/cve-2026-111472-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-b09e...", "creation_timestamp": "2026-10-16T13:30:29.408149Z"}, {"uuid": "91669f6e-2b6f-4d02-b32e-57b189741e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-111472", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117450829081265376", "content": "TSG Profleet CRITICAL SQL injection (CVE-2026-111472, CVSS 9.3): Unauthenticated attackers can manipulate DB via \u2018Identificaci\u00f3n\u2019 in /cgi-bin/index.php. Restrict access, deploy WAF. https://radar.offseq.com/threat/cve-2026-111472-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-b09ea35526b07e08 #OffSeq #infosec #vuln #sqlinjection", "creation_timestamp": "2026-10-16T13:30:30.564372Z"}, {"uuid": "b1e2d7b8-1b6b-4fc6-88a7-f9edc8daf849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111472", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117449740644404948", "content": "CVE-2026-111472 SQL injection in TSG Profleet An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the \u2018Identificaci\u00f3n\u2019 parameter of the \u2018/cgi-bin/index.php\u2019 endpoint.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111472https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-tsg-profleet#TSG #Profleet#CVE_2026_111472#bot", "creation_timestamp": "2026-10-16T08:53:38.582949Z"}, {"uuid": "84187217-01fa-45d7-bafc-4e50945bb6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111472", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4plwrpvqww6xq", "content": "CVE-2026-111472 - SQL injection in TSG Profleet\nCVE ID : CVE-2026-111472\n \n Published : Oct. 16, 2026, 9:17 a.m. | 17\u00a0minutes ago\n \n Description : An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create,...", "creation_timestamp": "2026-10-16T09:54:17.842660Z"}, {"uuid": "82621840-5695-4c19-88df-23dd0957ba5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111472", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxydexdflp24", "content": "\ud83d\udea8 CVE-2026-111472 \u2014 CVSS 9.3 CRITICAL\n\nAn SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attack...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-111472\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-16T10:07:44.327893Z"}, {"uuid": "a90827c5-aca7-4642-908c-ca77ba20e5ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111472", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxydj6a6fu2w", "content": "CVE-2026-111472 - profleet\nThe web page in TSG Profleet accepts a parameter that can be tricked into running database commands. This could let an unauthorized person view, add, change, or delete your fleet\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#profleet #tsg #CVE #infosec", "creation_timestamp": "2026-10-16T10:10:05.741003Z"}]}