CVE-2026-12116 — CVE-2026-12116
A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an a…
Published: 2026-07-09 · CVSS: 9.8 · CVSS 3.1
A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7