N/A
2026-03-10< 4.1.0
Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
Minimum safe version
4.1.0
Update to 4.1.0 or later to address 4 fixable vulnerabilities
Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
CVE-2026-25386
CVE-2025-10700
CVE-2025-32640