Security Risk Category
xerte-online-tools Security Risks
Published vulnerability pages connected to xerte-online-tools. One risk can appear in multiple categories while keeping one canonical page.
xerte-online-tools risks
Showing 2 of 2 published risks.
critical
Xerte Online Tools Antivirus Path Remote Code Execution Vulnerability
A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed.
CVE-2026-12116xertephprcexerte-online-tools
Updated Jul 10, 2026
critical
Xerte Online Tools Setup Reinstallation Authentication Bypass RCE Vulnerability
A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control.
CVE-2026-14261xertephprcexerte-online-tools
Updated Jul 10, 2026