CVE-2026-11754

MediumCVSS 5.3/10Last modified Aug 28, 2026

Description

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting.

This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-203

Affected software

VendorProductVersions
Seres SoftwaresyWEB<= 27082026

References

Timeline

Published
Aug 27, 2026
Last modified
Aug 28, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1175407.5svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedly rescans the whole CVE-2026-1175415.3svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that allows attackers to crash callers by submitting welCVE-2026-1175425.1Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A manipulated `update_file` form parameter could byCVE-2026-1175438.9Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8 - HTTP redirects when retrieving external downlCVE-2026-1175448.2Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8 - The `other_file_id` parameter could refeCVE-2026-1175458.8IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authenticCVE-2026-1175467.8Photoshop Desktop is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current CVE-2026-1175477.8Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cuCVE-2026-1175486.5A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema aliCVE-2026-1175494.2@fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie. In versions 7.5.0 through 8.4.1, when CVE-2026-1175507.1Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8 - Manipulated frontend submission parametersCVE-2026-11755110.0Joomla Extension - jdownloads.com - RCE through file upload in jDownloads < 4.1.8 - Insufficient validation of frontend thumbnail uploads a
CVE-2026-11754: Medium severity, CVSS 5.3 | Vulnix