OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-66248

LOW · CVSS 3.1 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-10-01 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

iControl is vulnerable due to an improper error handling flaw that allows unauthenticated attackers to generate verbose error messages, potentially revealing sensitive internal infrastructure details. This could facilitate advanced targeted attacks by providing insights into system configurations and vulnerabilities. Organizations using iControl should prioritize remediation efforts to mitigate the risk of information disclosure.

CVE
CVE-2026-66248
Severity
LOW
CVSS
3.1
EPSS
0.16%

Original NVD Description

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks.