CVE-2026-107083

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-19 · updated 2026-10-19
Weakness: CWE-89

Description

SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID.

References

https://github.com/Primandito/CVE-2026-107083
https://github.com/slims/slims9_bulian/issues/393
https://github.com/Primandito/CVE-2026-107083
https://github.com/slims/slims9_bulian/issues/393

Get alerted when CVE-2026-107083 or the next vulnerability affects your stack