Advisories · Technology

Raytha.

Every CVE that names Raytha among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12076 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

SQL Injection in Raytha CMS
- Raytha
- SQL injection
Not analysed yet 30 Jun 2026
CVE-2025-69246 CVE record

CVSS 6.9 Medium

Lack of bruteforce protection in Raytha CMS
- Raytha
- Authentication bypass
Not analysed yet 16 Mar 2026
CVE-2025-69245 CVE record

CVSS 5.1 Medium

Reflected XSS in Raytha CMS
- Raytha
- Cross-site scripting (XSS)
Not analysed yet 16 Mar 2026
CVE-2025-69243 CVE record

CVSS 6.9 Medium

User enumeration in Raytha CMS
- Raytha
- CWE-204
Not analysed yet 16 Mar 2026
CVE-2025-69242 CVE record

CVSS 5.1 Medium

Reflected XSS in Raytha CMS
- Raytha
- Cross-site scripting (XSS)
Not analysed yet 16 Mar 2026
CVE-2025-69241 CVE record

CVSS 5.3 Medium

Stored XSS in Raytha CMS
- Raytha
- Cross-site scripting (XSS)
Not analysed yet 16 Mar 2026
CVE-2025-69240 CVE record

CVSS 7.5 High

Header Poisoning in Raytha CMS
- Raytha
- CWE-348
Not analysed yet 16 Mar 2026
CVE-2025-69239 CVE record

CVSS 5.1 Medium

Server-Site Request Forgery in Raytha CMS
- Raytha
- Server-side request forgery (SSRF)
Not analysed yet 16 Mar 2026
CVE-2025-69238 CVE record

CVSS 6.9 Medium

Cross-Site Request Forgery in Raytha CMS
- Raytha
- Cross-site request forgery (CSRF)
Not analysed yet 16 Mar 2026
CVE-2025-69237 CVE record

CVSS 5.1 Medium

Stored XSS in Raytha CMS
- Raytha
- Cross-site scripting (XSS)
Not analysed yet 16 Mar 2026
CVE-2025-69236 CVE record

CVSS 5.1 Medium

Stored XSS in Raytha CMS
- Raytha
- Cross-site scripting (XSS)
Not analysed yet 16 Mar 2026
CVE-2025-15540 CVE record

CVSS 8.6 High

Authenticated RCE in Raytha CMS
- Raytha
- Code injection
Not analysed yet 16 Mar 2026