CVE-2026-19205
Received Received - Intake

Observable Response Discrepancy in GastroMenum Web Panel

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-19205
EUVD
EUVD-2026-71214

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
gastromenum gastromenum_web_panel to 2026-08-31 (exc)
gastromenum gastromenum_web_panel to 31.08.2026 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-204 The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an observable response discrepancy issue in the GastroMenum Web Panel. It allows attackers to gather information about user accounts by analyzing differences in server responses, which can reveal whether an account exists or not. This is also known as account footprinting.

Impact Analysis

An attacker could exploit this to determine if specific accounts exist on the system. This information could be used for further attacks, such as targeted phishing, brute force attempts, or reconnaissance to identify high-value accounts.

Compliance Impact

This vulnerability may lead to unauthorized disclosure of user account information, which could violate privacy requirements under GDPR and HIPAA. Organizations must ensure systems protect against such information leakage to maintain compliance.

Mitigation Strategies

Update GastroMenum Web Panel to version 31.08.2026 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19205. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart