Veille CVE

Semaine du 12 octobre au 18 octobre 2026

2 CVE

  1. CVE-2026-108497 9.3 Critique

    TMS Amelia

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10.

  2. CVE-2026-109684 5.3 Moyenne

    TMS Amelia

    Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.