CVE-2026-66840
HighCVSS 7.5Summary
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked.
Risk Assessment
Leakage of sensitive system information can aid an attacker in further attacks on the infrastructure.
Recommendation
Restrict access to the system and implement access control mechanisms to prevent unauthorized disclosure of information.
Other vulnerabilities in XING CPTrans-ME-X
See all- CVE-2026-70403Critical
XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected device.
- CVE-2026-69657Critical
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device.
- CVE-2026-62928Critical
XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.
Original NVD description (English source)
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked.