CVE-2026-88260CWE-1286CWE-288

CVE-2026-88260

published September 11, 2026

CVSS
8.7
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion.

This issue affects Zenius EMS 8.0: through OAM (Build 109).

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
8.7 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00319 · 23.6th percentile
Weaknesses
CWE-1286 · Improper Validation of Syntactic Correctness of Input; CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-09-11T07:16Z
References (1)
https://www.brainz.co.kr/Features · 09832df1-09c1-45b4-8a85-16c601d30feb
EPSS history
Timeline
  • 12 SEP 03:22Z
    EPSS moved — → 0%
    epss
  • 11 SEP 02:29Z
    Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS…
    cvelistv5