PT-2026-56794 · Unknown · Xerte Online Toolkits

Published 2026-07-09 · Updated 2026-07-09 · CVE-2026-12116

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xerte Online Tools (affected versions not specified)

Description A flaw in the tools server settings allows for Remote Code Execution (RCE). An attacker can modify the antivirus binary path to point to a PHP interpreter, enabling the upload and execution of PHP data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-12116

Affected Products

Xerte Online Toolkits

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-12116 · Security Note
• https://github.com/thexerteproject/xerteonlinetoolkits/commit/8ef20628f80bd88bd1fe3e5844a9116a910086b7 · Note
• https://github.com/thexerteproject/xerteonlinetoolkits/issues/1543 · Note
• https://xerte.org.uk/index.php/en/news/blog/80-news/364-xerte-3-14-and-3-15-important-security-update · Note
• https://reddit.com/r/SecOpsDaily/comments/1urprj7/vu734812_xerte_online_toolkit_contains_an · Reddit Post
• https://twitter.com/CVEnew/status/2075229339327545804 · Twitter Post
• https://twitter.com/infoflowcloud/status/2075230082134614456 · Twitter Post