CVE-2026-7189CWE-201
Sensitive Data Exposure in Proliz's OBS
High · published July 17, 2026
What it is
Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. Co. Proliz's OBS allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Proliz's OBS: before v3.6.0.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00416 · 34.8th percentile
- Weakness
- CWE-201 · Insertion of Sensitive Information Into Sent Data
- Published
- 2026-07-17T12:44Z
EPSS history
Timeline