Koha vulnerabilities
3 published CVEs name Koha among the affected products.
- Published CVEs
- 3
- Last 12 months
- 1
- Critical
- 1
- Known exploited
- 0
Critical 1High 2Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20261
Newest CVEs
- CVE-2026-19780
Koha Eval Code Injection Remote Code Execution Vulnerability
Koha · Koha
High8.8 - CVE-2025-30076
Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter.
Koha · Koha
High7.7 - CVE-2025-22954
GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter.
Koha · Koha
Critical10.0