CVE-2026-51366

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-51366

Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a SQL injection vulnerability in the api_vedo/chat endpoint via the utente_chat parameter. A remote, low-privilege attacker can exploit this to achieve arbitrary code execution , resulting in full compromise of confidentiality, integrity, a...

CVE-2026-51367

Bottinelli Informatica Vedo Suite v.1.2.5 contains an Insecure Direct Object Reference (IDOR) vulnerability in the api_vedo/chat endpoint via the utente_chat parameter. A remote, unauthenticated attacker can manipulate this parameter to access sensitive information belonging to other users, resul...

EUVD-2026-62481

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-51366

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-51367

An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...