CVE-2026-7187CWE-306

CVE-2026-7187

High · published July 28, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects UKBS: through 28072026.

NOTE: The vendor was contacted and it was learned that the product is not supported.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00366 · 29.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-07-28T17:19Z
References (1)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0664 · [email protected]
EPSS history
Timeline
  • 28 JUL 12:27Z
    Improper Authentication in Universal Sotware's UKBS
    cvelistv5