CVE-2026-10764CWE-321

CVE-2026-10764

High · published September 30, 2026

CVSS v3.1
8.7
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2026-09-30T14:17Z
References (1)
EPSS history
Timeline
  • 01 OCT 03:44Z
    EPSS moved — → 0%
    epss
  • 30 SEP 09:43Z
    Information disclosure in BVMS 4.5 up to 12.3
    cvelistv5