← Retour à la recherche de CVE

CVE-2026-40529

CMS ALAYA

Description

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.

CVSS 4.7EPSS 0.161%Risque 0.48
Voir la source
Publication
2026-04-23 05:16:04
Versions concernées
unknown
Type
Installed app
Vecteur
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L