VULNERABILITY INTELLIGENCE
CVE-2026-40529
CVSS score4.7 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-04-23
Last modified2026-10-26
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Description
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.
Weakness classification
- vultures@jpcert.or.jp: CWE-89