CVE-2026-40529 — CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface. — CVE Database · The Intelligence Room