CVE-2026-7382 describes a vulnerability in MeWare Software Development Inc.'s PDKS software versions from V16.20200313 up to but not including VMYR_3.5.2025117. The issue allows unauthorized actors to access sensitive private personal information, constituting an exposure of sensitive data (CWE-200). The vulnerability also relates to CWE-359, which involves exposure of sensitive information through improper handling. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires low privileges, no user interaction, unchanged scope, and high confidentiality impact with no integrity or availability impact. No official patch or remediation guidance is currently documented, and no exploits are known in the wild.

The vulnerability allows unauthorized disclosure of sensitive private personal information, which can lead to privacy violations and potential misuse of exposed data. There is no impact on data integrity or system availability. The medium CVSS score reflects the confidentiality impact without further system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. No specific mitigations are documented at this time.