Skip to content
OpenAdvisories

Vendor

Xerte

3 known vulnerabilities.

Products

Xerte Online Tools 2 Xerte Online Toolkits 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-14261

    CVE-2026-14261

    A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control.

    Xerte Xerte Online Tools
  • Critical 9.8
    CVE-2026-12116

    CVE-2026-12116

    A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed.

    Xerte Xerte Online Tools
  • Critical 9.8
    CVE-2026-32985 Public exploit

    Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Execution

    Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality that allows remote attackers to execute arbitrary code by uploading a crafted ZIP archive containing malicious …

    Xerte Xerte Online Toolkits