Vulnerabilities

TI-2026-23848 CVE-2026-31151 · GHSA-4wx7-2hfw-hhff

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login…

HIGH 82

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00397 Published 2026-04-06 No fix listed CWE-288

TI-2026-23847 CVE-2026-31150 · GHSA-mpxj-x6rg-mghc

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only…

MEDIUM 53

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00212 Published 2026-04-06 No fix listed CWE-284

Vulnerabilities

Filters

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login…

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only…