A vulnerability, which was classified as critical, was found in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block. Such manipulation leads to sql injection.

This vulnerability is documented as CVE-2026-1517. The attack can be executed remotely. Additionally, an exploit exists.

You should upgrade the affected component.