GIS Informatics vulnerabilities

Products

• GisLab Laboratory Management System 2

Latest GIS Informatics CVEs

Newest publication first

1. CVE-2026-9166 LFI in GIS Informatics' GisLab Laboratory Management System

   Published 2026-09-10

   High·CVSS 7.5 EPSS 0.50%

   Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

2. CVE-2026-9163 SQLi in GIS Informatics' GisLab Laboratory Management System

   Published 2026-09-10

   Critical·CVSS 9.8 EPSS 0.47%

   Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.