CVE-2026-5756

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS)

High · published April 14, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS) allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Published
2026-04-14T17:51Z
EPSS history
Timeline
  • 14 APR 17:51Z
    Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS)
    cvelistv5