Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-14261

CVE-2026-14261

Description

A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xerte Xerte Online Tools

  • 0 to < 3.14.6affected

Xerte Xerte Online Tools

  • 0 to < 3.15.5affected

References