VDB

CVE-2026-14261

CVE-2026-14261 PUBLISHED CVSS 9.1 CRITICAL

Reported by certcc · Published July 9, 2026

A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control.

Risk Scores

CVSS 3.1
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
XerteXerte Online Tools0
XerteXerte Online Tools0
XerteXerte Online Tools0, 0

Timeline

  • Jul 9, 2026 CVE Published
  • Jul 9, 2026 CVE Updated
  • Jul 10, 2026 Coalition ESS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›