Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-14261

CVE-2026-14261

A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control.

CVSS 3.1 · 9.1 Critical EPSS 1.0% KEV · Not listed
Vendors
Xerte
Products
Xerte Online Tools
CVE-2026-12116

CVE-2026-12116

A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Xerte
Products
Xerte Online Tools