CVE-2026-51366

Critical severity, CVSS 9.9. EPSS: 0.8% chance of exploitation in the next 30 days.

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo/chat endpoint and the utente_chat parameter

Published 2026-08-19. Last modified 2026-09-09.