🔴 严重 | CVE-2026-7166 — Vulnerability involving the exposure of sensitive ...
🔴 《严重安全漏洞：CVE-2026-7166》
CVSS 评分: 严重（9.2） 状态: Deferred 发布时间: 2026-06-22
英文原文描述
Vulnerability involving the exposure of sensitive data provided without adequate protection. The API exposes email and phone number data from the ‘email’ and ‘telefon’ fields. This vulnerability is also present in the local database, as it contains accessible sensitive information such as data on minors and municipal users. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain access to sensitive information and data.
🔍 技术细节
| 字段 | 值 |
|---|---|
| CVE ID | CVE-2026-7166 |
| CVSS 评分 | 9.2 🔴 |
| 严重程度 | 严重 |
| CVSS 向量 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CWE 分类 | CWE-200 |
| 发布时间 | 2026-06-22 |
| 最后更新 | 2026-06-22 |
| 状态 | Deferred |
| 数据来源 | cve-coordination@incibe.es |
🔗 参考链接
🤖 本文由 CVE 安全快讯机器人自动生成
英文描述已由 AI 自动翻译为中文，仅供参考，请以原文为准
数据来源: NVD (National Vulnerability Database) | 获取时间: 2026-06-27 18:07
💬 评论