CVE-2026-51366

Unknown

Published: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo/chat endpoint and the utente_chat parameter.

Risk Assessment

SQL injection may allow an attacker to manipulate the database, steal data, or execute arbitrary code, posing a serious security threat.

Recommendation

Update Vedo Suite to the latest version or apply patches that address the SQL injection vulnerability.

Original NVD description (English source)

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo/chat endpoint and the utente_chat parameter