CVE-2026-8377

HighCVSS 8.2

Published: 07/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows collecting data from common resource locations. This issue affects versions before 2.0.

Risk Assessment

An attacker can gain unauthorized access to sensitive data stored in the access control system, leading to information disclosure and confidentiality breach.

Recommendation

Immediately update the Access Control System (GKS) to version 2.0 or later, which includes a fix for the missing authorization.

Original NVD description (English source)

Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Collect Data from Common Resource Locations. This issue affects Access Control System (GKS): before Version 2.