HIGHCVSS v3.1 7.5Vulnerability
CVE-2026-19877
INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the link validity window and gain unauthorized access to shared medical images. Fixed in ULite 5.0.2.1 BN50.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-07T06:40:34.987550+00:00
- Epss score
- 0.00292
- Cvss severity
- HIGH
- Cvss score
- 7.5
- Retrieved at
- 2026-11-07T06:44:44+00:00
- Last source
- FIRST EPSS
- Score
- 7.5
- Cvss version
- 3.1
- Cve id
- CVE-2026-19877
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- First seen by Signal
- 2026-11-06T10:16:10+00:00
- Name
- CVE-2026-19877
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Published at
- 2026-11-06T09:17:01.700
- Last modified
- 2026-11-06T21:15:29.947
- Epss percentile
- 0.2188
Related Entities (2)
HAS_WEAKNESS (2)
Explore deeper with Ninja Signal's threat intelligence graph