CVE-2026-92555
waiting for further signalsZero needs more public information before it can validate it.GHSA-6vq9-p4m4-cq5x ↗EUVD-2026-94868 ↗
description
AKINSOFT WOLVOX Control Panel versions 26.02.25 through versions before 26.02.26 are affected by a sensitive-information exposure. An attacker may obtain data from system resources; the advisory does not document the access or authentication conditions required.
mitigation
Upgrade AKINSOFT WOLVOX Control Panel to version 26.02.26 or later. Until upgraded, restrict access to the control panel to trusted users and networks.
fixed in 26.02.26
outcome
Contextual: an exploit technique exists, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-08 11:49Zcve_org: trigger signal, started the run
- 2026-10-09 21:24ZEnay-Project/CVE-2026-92555
this entry in the feed
GET /api/v1/feed/CVE-2026-92555
{ "etk_id": "ETK-2026-969", "cve_id": "CVE-2026-92555", "display_id": "CVE-2026-92555", "ghsa_id": "GHSA-6vq9-p4m4-cq5x", "euvd_id": "EUVD-2026-94868", "status": "published", "anchor_state": "anchored", "title": "Sensitive-information exposure in AKINSOFT WOLVOX Control Panel", "summary": "AKINSOFT WOLVOX Control Panel versions 26.02.25 through versions before 26.02.26 are affected by a sensitive-information exposure. An attacker may obtain data from system resources; the advisory does not document the access or authentication conditions required.", "mitigation": "Upgrade AKINSOFT WOLVOX Control Panel to version 26.02.26 or later. Until upgraded, restrict access to the control panel to trusted users and networks.", "vendor": "AKIN Software Computer Import-Export Industry and Trade Co. Ltd.", "product": "AKINSOFT WOLVOX Control Panel", "affected": [ { "affected_notes": [], "affected_ranges": [ ">= 26.02.25, < 26.02.26" ], "ecosystem": null, "fixed_versions": [ "26.02.26" ], "package_name": "AKINSOFT WOLVOX Control Panel", "purl": null } ], "cwes": [ 201 ], "cvss_score": 9.1, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "epss_score": 0.0037, "epss_percentile": 0.2987, "epss_asof": "2026-10-20", "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 67.87964035, "t0_at": "2026-10-08T11:49:47.286000+00:00", "signals": { "public_poc": { "at": "2026-10-08T17:55:10+00:00", "days": 0.25373511574074076, "is_lower_bound": false, "measured_at": "2026-10-08T11:49:47.286000+00:00", "url": "https://github.com/Enay-Project/CVE-2026-92555" }, "trigger_signal": { "at": "2026-10-08T11:49:47.286000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-08T11:49:47.286000+00:00", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92555" } } }
published 2026-10-08 12:30Z
last change 2026-10-21 04:45Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.