CVE-2026-31151

CRITICAL

Kaleris YMS 7.2.2.1 - Auth Bypass

Title source: llm

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.

CVSS v3 9.8

EPSS 0.0005

EPSS Percentile 16.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

CWE

CWE-288

Status published

Products (1)

kaleris/yard_management_solutions 7.2.2.1

Published Apr 06, 2026

Tracked Since Apr 06, 2026