Xerte Online Tools vulnerabilities

2 vulnerabilities

Known vulnerabilities in Xerte Online Tools, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.1CVE-2026-14261xertexerte online tools
EPSS score
1.03%
A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control.9.8CVE-2026-12116xertexerte online tools
EPSS score
0.70%
A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed.