Vulnerabilities

TI-2026-23848 CVE-2026-31151 · GHSA-4wx7-2hfw-hhff

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login…

HIGH 82

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00397 Published 2026-04-06 No fix listed CWE-288

TI-2026-23847 CVE-2026-31150 · GHSA-mpxj-x6rg-mghc

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only…

MEDIUM 53

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00212 Published 2026-04-06 No fix listed CWE-284

TI-2025-04562 CVE-2025-5087 · GHSA-wq9q-jvph-86fj

Cleartext Transmission of Sensitive Information in Kaleris Navis N4

LOW 26

Kaleris NAVIS N4 ULC (Ultra Light Client) communicates insecurely using zlib-compressed data over HTTP.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00254 Published 2025-06-24 Fixed in 4.0 CWE-319

TI-2025-02235 CVE-2025-2566 · GHSA-8jgr-qfg7-w699

Deserialization of Untrusted Data in Kaleris Navis N4

MEDIUM 49

Kaleris NAVIS N4 ULC (Ultra Light Client) contains an unsafe Java deserialization vulnerability.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00645 Published 2025-06-24 Fixed in 4.0 CWE-502

Vulnerabilities

Filters

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login…

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only…

Cleartext Transmission of Sensitive Information in Kaleris Navis N4

Deserialization of Untrusted Data in Kaleris Navis N4