JTL SW GmbH has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 9.9 (critical), with 2 rated critical.
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.9
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
2
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-89310Critical· 9.9A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account.55CVE-2026-89309Critical· 10.0The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases55
JTL SW GmbH vulnerabilities
CVEs affecting JTL SW GmbH, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-89310Critical· 9.9A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account.
A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account.
▾ MidnightJTL SW GmbH · JTL-WMSEPSS 0.47%via NVD
CVE-2026-89309Critical· 10.0The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases
The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed wit…
▾ MidnightJTL SW GmbH · JTL-WMSEPSS 0.39%via NVD