Vulnerabilities

TI-2026-49186 CVE-2026-70403 · GHSA-cmq2-8jv5-p6pw

XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259).

MEDIUM 49

XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00524 Published 2026-09-04 Fixed in 1.8.1.17 CWE-259

TI-2026-48950 CVE-2026-69657 · GHSA-6wxx-c57w-qmvf

MEDIUM 49

XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00524 Published 2026-09-04 Fixed in 1.8.1.17 CWE-1393

TI-2026-47462 CVE-2026-66840 · GHSA-fhhq-q67p-8cvj

MEDIUM 44

XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00442 Published 2026-09-04 Fixed in 1.8.1.17 CWE-497

TI-2026-44976 CVE-2026-62928 · GHSA-wvq4-q789-f852

MEDIUM 52

XING CPTrans-ME-X contains an OS Command Injection (CWE-78).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02023 Published 2026-09-04 Fixed in 1.8.1.17 CWE-78