CVE-2026-63359
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over accounts, access sensitive PII, and dump other information from the database.
Risk Assessment
An attacker can fully compromise user accounts, access sensitive personal data and database information, leading to severe privacy and security breaches.
Recommendation
Immediately apply the vendor-supplied patch or temporarily disable access to VINE applications until updated.
Original NVD description (English source)
The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information from the database.