← Volver al buscador de CVEs

CVE-2026-40529

CMS ALAYA

Descripción

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.

CVSS 4.7EPSS 0.161%Riesgo 0.48
Ver fuente
Publicación
2026-04-23 05:16:04
Versiones afectadas
unknown
Tipo
Installed app
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L