CVE-2026-40529_CVE-2026-40529

4.7 / 10

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Description

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.

Basic Information

ID CVE-2026-40529

Source jpcert

Published Apr 23, 2026 at 04:15

Affected Product

Vendor KANATA Limited

Product CMS ALAYA

Version 7.4.1.4 and earlier

Affected Versions KANATA Limited CMS ALAYA 7.4.1.4 and earlier

CWE Classification

CWE-89

References

jvn.jp /en/jp/JVN08026319/

{
    "lastseen": "",
    "description": "CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.",
    "published": "2026-04-23T04:15:33.414Z",
    "modified": "2026-04-23T04:15:33.414Z",
    "type": "cve",
    "title": "CVE-2026-40529",
    "source": "jpcert",
    "references": "https://jvn.jp/en/jp/JVN08026319/",
    "id": "CVE-2026-40529",
    "bulletinFamily": "",
    "cwe": [
        "CWE-89"
    ],
    "cvelist": null,
    "sourceData": "KANATA Limited CMS ALAYA 7.4.1.4 and earlier",
    "sourceHref": "",
    "cvss": {
        "score": 4.7,
        "severity": "MEDIUM",
        "vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
        "version": "3.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "CMS ALAYA",
    "version": "7.4.1.4 and earlier",
    "vendor": "KANATA Limited",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}