CVE-2026-35097CWE-521

Weak Password Requirements in KTM System e-BOK

Medium · published June 30, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters.

This issue was fixed in the patch published in June 2026.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00421 · 35.4th percentile
Weakness
CWE-521 · Weak Password Requirements
Published
2026-06-30T13:37Z
EPSS history
Timeline
  • 30 JUN 13:37Z
    Weak Password Requirements in KTM System e-BOK
    cvelistv5