CVE-2026-88467

Deferred Deferred - Pending Action

CRMEB Knowledge-Paid System Type Confusion Flaw

Publication date: 2026-09-21

Last updated on: 2026-10-01

Assigner: MITRE

Description

CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of value, causing errors and leaking sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-21

Last Modified

2026-10-01

Generated

2026-10-12

AI Q&A

2026-09-22

EPSS Evaluated

2026-10-10

NVD

CVE-2026-88467

Affected Vendors & Products

Vendor	Product	Version / Range
crmeb	knowledge_paid_system	1.4.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-209	The product generates an error message that includes sensitive information about its environment, users, or associated data.

Attack-Flow Graph

Executive Summary

The vulnerability in CRMEB Knowledge-Paid System version 1.4.4 involves a backend verification function that incorrectly returns a value type. This causes errors in the system and may lead to the exposure of sensitive information.

Impact Analysis

This vulnerability can cause system errors and potentially leak sensitive data due to incorrect value type returns in the backend verification function.

Compliance Impact

The vulnerability involves a backend verification function returning incorrect data types, leading to errors and potential sensitive information leaks. This could violate GDPR's data protection principles or HIPAA's confidentiality requirements if personal or health data is exposed.

Mitigation Strategies

Update the CRMEB Knowledge-Paid System to the latest version to fix the backend verification function issue. Review system logs for errors related to value type mismatches and sensitive information exposure.

Hi! I’m here to help you understand CVE-2026-88467. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70