CVE-2026-7382CWE-200CWE-359

Information Disclosure in MeWare Software's PDKS

Medium · published April 30, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation.

This issue affects PDKS: from V16.20200313 before VMYR_3.5.2025117.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.4th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2026-04-30T12:34Z
EPSS history
Timeline
  • 30 APR 12:34Z
    Information Disclosure in MeWare Software's PDKS
    cvelistv5