Vtenext vulnerabilities
We track 3 vulnerabilities in Vtenext products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest Vtenext vulnerabilities
- 9.8 Critical severity
vtenext: Unverified Password Change
vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to change any account password via hub/rpwd.php without token verification. Attackers knowing a valid user_name can send action=change_password t
- 8.1 High severity
vtenext: Improper Neutralization of Special Elements used in an SQL Command
vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by supplying a crafted fieldname parameter to modules/Fax/EditView.php. Attackers can read arbitrary database contents, including passwo
- 8.1 High severity
vtenext: Unrestricted Upload of File with Dangerous Type
Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckeditor file manager