VulnerabilityDeferred

CVE-2026-7189

Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd.

HIGH 7.5EPSS 0.42%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.42%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. Co. Proliz's OBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Proliz's OBS: before v3.6.0.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.42% probability · 35th percentile
CISA KEV: Not listed
Weakness: CWE-201
Source: iletisim@usom.gov.tr

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0571

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.