CVE-2026-7382

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation. This issue affects PDKS: from V16.20200313 before VMYR_3.5.2025117.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0141
https://www.usom.gov.tr/bildirim/tr-26-0141

Configurations

No configuration.

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Exposición de Información Sensible a un Actor No Autorizado, vulnerabilidad de exposición de información personal privada a un actor no autorizado en MeWare Software Development Inc. PDKS permite la Excavación. Este problema afecta a PDKS: desde V16.20200313 antes de VMYR_3.5.2025117.

Information

Published : 2026-04-30 13:16

Updated : 2026-10-26 21:10

NVD link : CVE-2026-7382

Mitre link : CVE-2026-7382

CVE.ORG link : CVE-2026-7382

JSON object : View

Products Affected

No product.

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-359

Exposure of Private Personal Information to an Unauthorized Actor

{"id": "CVE-2026-7382", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7382", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-30T13:14:42.586328Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "MeWare Software Development Inc.", "product": "PDKS", "versions": [{"status": "affected", "version": "V16.20200313", "lessThan": "VMYR_3.5.2025117", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-30T13:16:06.267", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0141", "source": "iletisim@usom.gov.tr"}, {"url": "https://www.usom.gov.tr/bildirim/tr-26-0141", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-359"}]}], "descriptions": [{"lang": "en", "value": "Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation.\n\nThis issue affects PDKS: from V16.20200313 before VMYR_3.5.2025117."}, {"lang": "es", "value": "Exposici\u00f3n de Informaci\u00f3n Sensible a un Actor No Autorizado, vulnerabilidad de exposici\u00f3n de informaci\u00f3n personal privada a un actor no autorizado en MeWare Software Development Inc. PDKS permite la Excavaci\u00f3n.\n\nEste problema afecta a PDKS: desde V16.20200313 antes de VMYR_3.5.2025117."}], "lastModified": "2026-10-26T21:10:00.170", "sourceIdentifier": "iletisim@usom.gov.tr"}