2026-06-04 · 2 min · BitNinja Team

CVE-2026-26378: Koha Vulnerability Overview

The recent discovery of CVE-2026-26378 highlights a critical issue within Koha version 25.11 and earlier. This vulnerability enables a remote attacker to exploit the invoice file upload feature, potentially executing arbitrary code. System administrators and hosting providers...