CVE-2026-5792

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Authentication bypass by spoofing vulnerability in Hedef Media Promotion Interactive Media Marketing Inc. Related Marketing Cloud (RMC) allows Brute Force.

This issue affects Related Marketing Cloud (RMC): through 12052026.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-290

Affected software

No affected versions have been published.

Timeline

Published
Jun 12, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-579207.7Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} enCVE-2026-579217.5In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpointCVE-2026-579225.3In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possibleCVE-2026-579237.5In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settingsCVE-2026-579245.3In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile detailsCVE-2026-579255.3In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tagsCVE-2026-579269.8In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attackCVE-2026-57936.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Inrove Software and Internet Services CVE-2026-57944.9A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lCVE-2026-579402.1HTMLy 3.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the RSS feed import functionality. The function get_feed() in sysCVE-2026-579419.8Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP ServeCVE-2026-579425.3LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function that allow
CVE-2026-5792: Medium severity, CVSS 6.5 | Vulnix