CVE-2026-40529
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability.
Published Apr 23, 2026 · updated Jun 17, 2026
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 23, 2026 · NIST NVD
Detected
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.
Jun 17, 2026 · NIST NVD
Updated
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.
Sources
- CVE.orgVulnerability recordCVE-2026-40529
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-40529
CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.
nvd.nist.gov