עברית

Vulnerability Intelligence

CVE-2026-2406

Medium 6.5

Published
Last modified
NVD status
Deferred

Description

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through 12022026.

References1

Metrics

CVSS 3.1
6.5 MEDIUM Score source: CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS — exploit probability
0% percentile: 28 · as of 14 November 2026
CWE
CWE-639

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.