← Back

Candidats

candidats

Vendor: Auieosoftware • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Auieosoftware
1Candidats
Jun 17, 2026
Nov 3, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable to XXE.