CVE-2026-51366

The Bottinelli Informatica Vedo Suite v.1.2.5 is vulnerable to SQL Injection through the api_vedo/chat endpoint, allowing remote attackers to execute arbitrary code by manipulating the utente_chat parameter. Organizations utilizing this software should prioritize remediation to prevent potential unauthorized access and exploitation of their systems. Immediate attention is recommended for those handling sensitive data or operating in regulated environments.