CVE Catalog

CVE-2026-11754

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Seres Software syWEB has an observable discrepancy vulnerability allowing Account Footprinting. This affects syWEB through 27082026. The vendor was contacted and it was learned that the product is not supported.

Risk Assessment

An attacker can exploit differences in system responses to gather information about accounts, potentially facilitating further attacks.

Recommendation

Since the product is unsupported, consider migrating to a supported solution or apply additional security measures such as restricting access to the system.

Original NVD description (English source)

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS