What’s Vulnerable › Vulnerabilities
CVE-2026-85215: SQL Injection in GG Soft's Paperwork
- Severity: high (CVSS 7.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-02 · updated 2026-10-16
- Weakness: CWE-89
Description
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue affects Paperwork: through 2026-09-09.
Affected products
- GG Soft Software Services Inc. PaperWork: through 2026-09-09
References
Get alerted when CVE-2026-85215 or the next vulnerability affects your stack