PHP Synchronization Endpoint Vulnerability in CGM XDent and XMedical

CVE-2026-112172

What is CVE-2026-112172?

CGM XDent and XMedical expose PHP synchronization endpoints, which create a security loophole for unauthenticated attackers. This vulnerability allows these malicious actors to manipulate session variables, leading to potential unauthorized access. Additionally, attackers can execute arbitrary SQL queries on backend MySQL databases, which could result in data tampering or breaches. It’s crucial for users of CGM XDent and XMedical to implement security measures to protect against such threats.

References