CVE Catalog
CVE-2026-66463
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.30%
23th percentile - higher than 23% of all known CVEs
Summary
Unauthenticated Sensitive Data Exposure in iCARRY plugin versions up to 2.9. An attacker without authentication can access confidential information.
Risk Assessment
Leakage of sensitive data, such as customer data or configuration data, which may compromise privacy and security of the organization.
Recommendation
Update the iCARRY plugin to the latest version that fixes the data exposure issue.
Original NVD description (English source)
Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions.