CVE-2026-26721

Katalog CVE

CVSS 7.1 · High EPSS 0,42%

Kerentanan Use of HTTP Request With Sensitive Query String pada keystorage global facilities management software. Skor CVSS 3.1 7.1 (High) menurut CISA ADP.

Deskripsi (NVD)

An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter.

Rincian

Terbit di NVD

20 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-598: Use of HTTP Request With Sensitive Query String

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2026-26721 exploit · advisory pihak ketiga