CVE-2026-14177: CWE-204 Observable response discrepancy in IKAS Technology Inc. ikas E-Commerce Infrastructure

This vulnerability (CVE-2026-14177) involves an observable response discrepancy in the ikas E-Commerce Infrastructure by IKAS Technology Inc. that enables attackers to perform account footprinting. The flaw is classified under CWE-204, indicating that differences in system responses can be used to infer information about user accounts. The affected versions include all releases up to and including 2026-07-13. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and a high impact on confidentiality but no impact on integrity or availability.

The vulnerability allows attackers to perform account footprinting by observing differences in system responses, potentially exposing sensitive information about user accounts. This can aid attackers in reconnaissance activities, increasing the risk of targeted attacks. There is no reported impact on system integrity or availability. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor IKAS Technology Inc. advisories for updates. Until a fix is available, consider limiting exposure of the affected service and applying any recommended configuration changes from the vendor if available.