CVE-2026-112172

CVE-2026-112172CVE-2026-112172

Description

CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session variables and execute arbitrary SQL queries against backend MySQL databases.

Scoring

Last modified2026-11-09
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.