CVE-2026-40529

KANATA Limited / CMS ALAYA PUBLISHED

Description (CNA)

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.

Affected (CNA)

Vendor / product	Versions
KANATA Limited / CMS ALAYA	affected 7.4.1.4 and earlier

CWE

CWE-89

References

https://jvn.jp/en/jp/JVN08026319/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.