CVE-2026-66840
Received Received - Intake

Exposure of Sensitive System Information in XING CPTrans-ME-X

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: JPCERT/CC

Description
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-66840
EUVD
EUVD-2026-70917

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

XING CPTrans-ME-X has a flaw where sensitive system information is exposed to unauthorized parties. This is classified as Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497).

Detection Guidance

This vulnerability involves exposure of sensitive system information. Detection may require network monitoring for unusual data leaks or system logs checking for unauthorized information disclosure. No specific commands are provided in the available context.

Impact Analysis

An attacker could exploit this to access confidential system details, potentially leading to further attacks or data breaches. The high CVSS scores (7.5 v3.0, 8.7 v4.0) indicate significant risk of information disclosure.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Immediately update XING CPTrans-ME-X to the latest patched version to prevent sensitive system information exposure. Monitor network traffic for unusual data leaks and restrict access to sensitive system information to authorized personnel only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66840. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart