CVE-2026-82924: CWE-799 Improper Control of Interaction Frequency in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail

The vulnerability identified as CVE-2026-82924 in Expert Mail involves improper control of interaction frequency, enabling brute force attacks. This means the application does not adequately limit the number or rate of interactions (such as login attempts), which can be exploited to guess credentials or perform other automated attacks. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with a low complexity requirement and limited confidentiality impact. No official fix or patch information is available at this time.

An attacker can perform brute force attacks remotely against Expert Mail due to lack of proper interaction frequency controls. This may lead to limited confidentiality loss, such as unauthorized access to information, but does not affect integrity or availability. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing external rate limiting or monitoring to reduce brute force attack risk.