CVE-2026-117607Published
Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-117607 · Microsoft / collected KEV context
cve-program · CVE-2026-117607
- https://github.com/thexerteproject/xerteonlinetoolkits/issues/1557
- https://github.com/thexerteproject/xerteonlinetoolkits/blob/c381d8cbdff6b59bb52bf158cd30cf2c425cb24b/functions.php#L419
- https://github.com/thexerteproject/xerteonlinetoolkits/blob/c381d8cbdff6b59bb52bf158cd30cf2c425cb24b/website_code/php/language/import_language.php#L211
- https://github.com/thexerteproject/xerteonlinetoolkits
- https://www.vulncheck.com/advisories/xerte-online-toolkits-through-3.15.5-rce-via-language-pack-import
Related operational evidence
Explicit CVE identifiers- Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import · Newly collected advisory · 28 Oct 2026