Veille CVE

Recherche « Xerte Online Tools »

2 CVE

Critique 2 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Xerte Online Tools » ✕
  1. CVE-2026-14261 9.1 Critique

    Xerte Online Tools

    A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control.

  2. CVE-2026-12116 9.8 Critique

    Xerte Online Tools

    A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed.