Veille CVE

Semaine du 19 octobre au 25 octobre 2026

3 CVE

  1. CVE-2026-112862 9.8 Critique

    xnau webdesign Participants Database

    Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5.

  2. CVE-2026-112860 9.3 Critique

    xnau webdesign Participants Database

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5.

  3. CVE-2026-112861 6.3 Moyenne

    xnau webdesign Participants Database

    Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database: from n/a through 2.7.8.5.