Cyber News / Article / Vulnerability in Raytha CMS software
Vulnerability in Raytha CMS software
CERT Polska has received a report about vulnerability in Raytha CMS software and participated in coordination of its disclosure.
The vulnerabilityCVE-2026-12076: Raytha CMS is vulnerable to SQL Injection within the OData filter parsing pipeline. The vulnerability allows a remote, unauthenticated attacker to execute arbitrary SQL statements against the underlying PostgreSQL database, leading to full database compromise, including credential extraction.
Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 1.5.2 but may also affect other versions.
We thank Arkadiusz Marta for the responsible vulnerability report.
Related articles
Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
8 days ago
Windows Remote Desktop Client Vulnerability Allows Attackers to Execute Remote Code
2 days ago
Windows BitLocker Vulnerability Allows Attackers to Execute Malicious Code Remotely
2 days ago
You might Also like
Hackers Target Claude, Cursor and Codex AI Agents to Steal Tokens and Prompt Histories
DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval
