Threat database

4 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.2%	CVE-2026-14177ikas E-Commerce Infrastructure · Observable response discrepancy High7.5EPSS 0.2%2026-10-16CVE Database V5CVE-2026-14177 Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting. This issue affects ikas E-Commerce Infrastructure: through 2026-07-13. EPSS 0.2%Vulnerability IKAS Technology Inc.#cwe-204	CVE Database V5	2026-10-16
Medium	5.3	EPSS 0.4%	CVE-2026-19441Rush · Missing authentication for critical function Medium5.3EPSS 0.4%2026-08-21CVE Database V5CVE-2026-19441 CVE-2026-19441 is a medium severity vulnerability in IKAS Technology Inc.'s Rush product, involving missing authentication for a critical function. This flaw allows an attacker to fake the source of data. The affected version is exactly 0. The product is no longer supported by the vendor, and no patch is available. EPSS 0.4%Vulnerability IKAS Technology Inc.#cwe-306	CVE Database V5	2026-08-21
High	7.5	EPSS 0.4%	CVE-2026-7488E-Commerce · Insertion of sensitive information into sent data High7.5EPSS 0.4%2026-07-17CVE Database V5CVE-2026-7488 Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026. EPSS 0.4%Vulnerability IKAS Technology Inc.#cwe-201	CVE Database V5	2026-07-17

Showing 1–4 of 4 results · 1 duplicate CVE record merged