← Back to CVE search

CVE-2026-40529

CMS ALAYA

Description

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.

CVSS 4.7EPSS 0.161%Risk 0.48
View source
Published
2026-04-23 05:16:04
Affected versions
unknown
Type
Installed app
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L