Advisories · Technology

thexerteproject xerteonlinetoolkits.

Every CVE that names thexerteproject xerteonlinetoolkits among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-117607 CVE record

CVSS 8.6 High

Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import
- thexerteproject xerteonlinetoolkits
- Unrestricted file upload
Not analysed yet 28 Oct 2026
CVE-2026-34413 CVE record

CVSS 8.8 High

Xerte Online Toolkits Missing Authentication via connector.php
- thexerteproject xerteonlinetoolkits
- Information disclosure
Not analysed yet 22 Apr 2026
CVE-2026-34415 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Xerte Online Toolkits File Upload RCE via elfinder Connector
- thexerteproject xerteonlinetoolkits
- CWE-184
Not analysed yet 22 Apr 2026
CVE-2026-34414 CVE record

CVSS 7.1 High

Xerte Online Toolkits Path Traversal via connector.php
- thexerteproject xerteonlinetoolkits
- Path traversal
Not analysed yet 22 Apr 2026
CVE-2026-41459 CVE record

CVSS 6.9 Medium

Xerte Online Toolkits Path Disclosure via /setup
- thexerteproject xerteonlinetoolkits
- Information disclosure
Not analysed yet 22 Apr 2026