Skip to content
OpenAdvisories
Medium · 4.7 CVE-2026-40529 EUVD-2026-25184GHSA-g347-f6xx-g55w

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered…

Published Apr 23, 2026 · Updated Apr 23, 2026 · Assigned by jpcert

Description

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.

Affected products

VendorProductAffectedFixed
KANATA CMS ALAYA 7.4.1.4 and earlier —

References