Is CVE-2026-68954 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-68954?

CVE-2026-68954 has a CVSS v3 severity of CRITICAL (9).

Back

CVE-2026-68954

Description

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.