AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-18915

MEDIUM · CVSS 5 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-08-06 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The eta-otp-lock software prior to version 1.0.4 is vulnerable to a process invocation flaw that exposes sensitive information, potentially allowing attackers to perform system footprinting. This could lead to unauthorized access or further exploitation of the system. Organizations using this software should prioritize patching to mitigate the risk of information leakage and enhance their security posture.

CVE
CVE-2026-18915
Severity
MEDIUM
CVSS
5
EPSS
0.10%

Original NVD Description

Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4.