KANATA Limited CMS ALAYA

• CVE-2026-40529 Medium 4.7 CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface. 0.2%