CVE-2026-40543

Name of the Vulnerable Software and Affected Versions SOPlanning versions prior to 1.56

Description Lack of authorization enforcement for backup functionalities allows an unauthenticated attacker to query backup-related endpoints. This can lead to the retrieval of backup archives containing user databases with usernames and password hashes, as well as the config.csv file containing sensitive information.

Recommendations Update to a version later than 1.55.