CVE-2026-51367: Authorization Bypass Through User-Controlled Key

An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...

PT-2026-78356

Name of the Vulnerable Software and Affected Versions Bottinelli Informatica Vedo Suite version 1.2.5 Description A SQL Injection issue allows a remote attacker to execute arbitrary code. This is possible through the 'api vedo/chat' endpoint by manipulating the utente chat parameter...

CVE-2026-51366: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...