What’s Vulnerable › Vulnerabilities
CVE-2026-40529
- Severity: medium (CVSS 5.1 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-04-23 · updated 2026-10-26
- Weakness: CWE-89
Description
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.
Affected products
- KANATA Limited CMS ALAYA: through 7.4.1.4
References
Get alerted when CVE-2026-40529 or the next vulnerability affects your stack