EUVD-2026-120018

CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session variables and execute arbitrary SQL queries against backend MySQL databases...

CVE-2026-112172

The software CGM XDent and XMedical contains a vulnerability in its PHP synchronization endpoints . This flaw allows unauthenticated attackers to manipulate session variables and perform arbitrary SQL queries against the backend MySQL databases. No specific patch versions or workarounds are provi...