PT-2026-34636 · Kanata Limited · Cms Alaya

Published 2026-04-23 · Updated 2026-04-23 · CVE-2026-40529

Mitre

CVSS v3.1

4.7

Medium

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-40529

Affected Products

Cms Alaya

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-40529 · Security Note
• https://jvn.jp/en/jp/JVN08026319 · Note