VULNERABILITY INTELLIGENCE

CVE-2026-31150

CVSS score4.3 MEDIUM

EPSS probability0.20%

CISA KEVNot currently listed

Published2026-04-06

Last modified2026-06-17

Description

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.