CVE-2026-31151

CRITICAL

Kaleris Yard Management Solutions 7.2.2.1 - Authentication Bypass via Login Mechanism

Title source: llm
STIX 2.1

Description

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.

Scores

CVSS v3 9.8
EPSS 0.0038
EPSS Percentile 29.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-288
Status published
Products (1)
kaleris/yard_management_solutions 7.2.2.1
Published Apr 06, 2026
Tracked Since Apr 06, 2026