CVE-2026-19780

Timeline

Detection, updates, and resolution for this record.

1. Sep 8, 2026 · Catalog

   Detected

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-19780.

Sources

• CVE.orgCVE-2026-19780

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2026-19780

  30-day exploitation probability 0.6%

  first.org
• Zero Day InitiativeZDI-26-616

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-19780.

  zerodayinitiative.com