CVE-2026-40529: CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be...
MEDIUM
CVSS 4.7
Exploit Available
Published: April 23, 2026 | Last Modified: April 23, 2026
Description
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.
Ghostwire Analysis — What This Means Practically
- Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.
- Exploit code is reported to be available, increasing the likelihood of active exploitation.
This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.
Security Coverage (2 articles)
References