CVE-2026-112172

The software CGM XDent and XMedical contains a vulnerability in its PHP synchronization endpoints . This flaw allows unauthenticated attackers to manipulate session variables and perform arbitrary SQL queries against the backend MySQL databases. No specific patch versions or workarounds are provi...