CVE-2026-114574

MEDIUM Status: Received

CVSS Scores

CVSS v3.x Base Score
4.3
MEDIUM
CVSS v2 Base Score
5.0
MEDIUM

Description

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The name of the patch is d25d8fa3f5a1e34285c8634f18729650c0c05cda. It is advisable to implement a patch to correct this issue.

Published
October 22, 2026 1:16 AM
Last Modified
October 22, 2026 1:16 AM
Source
[email protected]

Weaknesses (CWE)

CWE-200 CWE-284

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry