Skip to content
OpenAdvisories

Vendor

Xerte

3 known vulnerabilities.

Products

Xerte Online Tools 2 Xerte Online Toolkits 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-32985 Public exploit

    Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Execution

    Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality that allows remote attackers to execute arbitrary code by uploading a crafted ZIP archive containing malicious …

    Xerte Xerte Online Toolkits