CVE-2026-14261

The Xerte Online Toolkits e-learning authoring suite contains an authentication bypass and remote code execution (RCE) vulnerability. The flaw exists because the /setup/ directory persists after installation without proper access controls. An unauthenticated attacker can access /setup/index.php t...