CVE Catalog

CVE-2026-51367

Unknown
Published: Translated: NVD NIST

Summary

An issue in Bottinelli Informatica Vedo Suite v1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat endpoint and the utente_chat parameter.

Risk Assessment

Exposure of sensitive information may compromise the confidentiality of user or system data, potentially leading to further attacks.

Recommendation

Update Vedo Suite to the latest version or apply available security patches.

Original NVD description (English source)

An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat endpoint and the utente_chat parameter

Vulnerability data from NVD (NIST) · CISA KEV · EPSS