CVE-2026-8406

PENDING

N/A

CVSS Severity Score

EPSS Score0.1230%

EPSS Percentile25.08th

Published2026年6月11日

Last Modified2026年6月11日

Vulnerability Description

openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mail_id value.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://fluidattacks.com/es/advisories/melanie

🔗 https://github.com/OS4ED/openSIS-Classic

🔗 https://github.com/OS4ED/openSIS-Classic/commit/c45d43146167324bae06bdf09de3e4bd2e5e478f

🔗 https://fluidattacks.com/es/advisories/melanie

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相關漏洞威脅