CVE-2026-62038: CWE-288 Authentication Bypass Using an Alternate Path or Channel in DigitalME eRoom

CVE-2026-62038 describes an authentication bypass vulnerability in DigitalME eRoom software versions up to 1.7.1. The issue arises from broken authentication mechanisms that can be circumvented using an alternate path or channel, allowing unauthenticated attackers to gain unauthorized access. The vulnerability is identified as CWE-288. The CVSS 3.1 score of 7.3 indicates a high-severity vulnerability exploitable remotely without privileges or user interaction, impacting confidentiality, integrity, and availability of the affected system.

Successful exploitation of this vulnerability could allow attackers to bypass authentication controls without any credentials, leading to unauthorized access to the eRoom system. This may result in partial compromise of confidentiality, integrity, and availability of data and services managed by the affected software.

No patch or official remediation information is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is provided, organizations should consider restricting network access to the affected eRoom instances and monitor for any suspicious activity related to authentication bypass attempts.