CVE-2024-26520

9.8 criticalEPSS 0.5%

Critical (9.8). EPSS 0.5% chance of exploitation in the next 30 days.

An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-620
Published: 2024-07-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://idssgmcc.github.io/aran.github.io/2.html
https://idssgmcc.github.io/aran.github.io/2.html

Check your stack JSON