CVE Catalog
CVE-2026-19424
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.41%
34th percentile - higher than 34% of all known CVEs
Summary
Chiline Cloud developed by Inventec Appliances has an Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to read other users' sensitive data.
Risk Assessment
Attackers can access other users' data, violating privacy and potentially leading to information leakage.
Recommendation
Implement proper access control and authorization at the object level and apply vendor patches.
Original NVD description (English source)
Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to read other users' sensitive data.