CVE-2026-51367: Bottinelli Informatica Vedo Suite vulnerability
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The issue is reachable remotely through the api_vedo/chat endpoint and involves the utente_chat parameter. No authentication requirement or other prerequisite is specified in the available information.
How can I determine whether my deployment is affected?
Confirm whether the deployment is Bottinelli Informatica Vedo Suite version 1.2.5 and exposes the api_vedo/chat endpoint. Review whether requests can use the utente_chat parameter to retrieve information associated with other users.
What information can be accessed if exploitation succeeds?
The available information states that sensitive information may be obtained. It does not identify the specific data types or records that may be exposed.