Lucene search
+L

5 matches found

OSV
OSV
•added 2026/07/09 12:37 p.m.•15 views

CVE-2026-12116 CVE-2026-12116

A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed...

9.8CVSS6.1AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/07/09 12:37 p.m.•16 views

CVE-2026-12116 CVE-2026-12116

A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed...

5.9AI score0.00702EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/09 12:37 p.m.•64 views

CVE-2026-12116

The Xerte Online Toolkits e-learning authoring toolsuite contains a vulnerability allowing Remote Code Execution (RCE) . An attacker can modify the antivirus binary path in the tools server settings to point to a PHP interpreter . This configuration allows uploaded files to be executed as PHP cod...

9.8CVSS5.9AI score0.00702EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/09 12:37 p.m.•53 views

CVE-2026-12116 CVE-2026-12116

A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed...

0.00702EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/09 12:00 a.m.•3 views

CVE-2026-12116: Undefined Security Weakness

A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed...

9.8CVSS5.8AI score0.00702EPSS
SaveExploits0References1
Rows per page
Query Builder