A AegiFlow
MEDIUMCVSS 5.1

CVE-2026-40529

CVE-2026-40529 updated by NVD

Modified
2026-10-28
Sources
nvd

Summary

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.