← Database

CVE-2026-31150

MEDIUM CVSS: 4.3 Published: 2026-04-06 Modified: 2026-06-17

Description

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.

Affected Platforms

Kaleris Yard Management Solutions

Weakness Type

CWE-284, CWE-639

References