CVE-2026-112172
CVE-2026-112172CVE-2026-112172
Description
CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session variables and execute arbitrary SQL queries against backend MySQL databases.
Scoring
| Last modified | 2026-11-09 |