medium4.7
CVE-2026-40529
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability.
Impact
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.