CVE-2024-44860: solvait · An Information Disclosure
Affects solvaitSource CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 26 Oct 2026, 09:15 UTC
- EPSS
- 0.5% chance of exploitation in 30 days – higher than 43% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 26 Sep 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
GitHubsolvait/solvaitpkg:github/solvait/solvaitOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until an official patch is released, organizations should implement the following specific mitigations: 1) Restrict network access to the /Letter/PrintQr/ endpoint using firewalls, VPNs, or IP whitelisting to limit exposure to trusted users and systems only. 2) Employ web application firewalls (WAFs) with custom rules to detect and block suspicious or malformed requests targeting this endpoint. 3) Conduct thorough logging and monitoring of access to the vulnerable endpoint to detect anomalous activity indicative of exploitation attempts. 4) Review and tighten access control policies within Solvait configurations to ensure that sensitive endpoints require proper authentication and authorization. 5) Engage with Solvait vendor support to obtain timelines for patches or updates and apply them promptly once available. 6) Consider temporary disabling or isolating the affected functionality if feasible without disrupting critical operations. 7) Educate security teams and incident responders about this vulnerability to prepare for potential exploitation scenarios. These targeted actions go beyond generic advice by focusing on access restriction, detection, and vendor coordination specific to the vulnerable endpoint.
Description
An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access sensitive data via a crafted request.