CVE-2026-97181
Deferred Deferred - Pending Action

Sensitive Data Exposure in GPM LIGHT by ezGlobal

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: TWCERT/CC

Description
GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-25
AI Q&A
2026-09-24
EPSS Evaluated
2026-09-24
NVD
CVE-2026-97181
EUVD
EUVD-2026-85814

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ezglobal gpm_light *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-97181 is a Sensitive Data Exposure vulnerability in GPM LIGHT, a Green Supply Chain Management System developed by ezGlobal. Unauthenticated remote attackers can directly access system logs without needing any privileges or user interaction.

Detection Guidance

To detect this vulnerability, check if unauthenticated users can access system logs remotely. Verify if GPM LIGHT logs are exposed by attempting direct access to log endpoints or directories. Monitor network traffic for unauthorized log requests.

Impact Analysis

Attackers could access sensitive information stored in system logs, leading to potential data breaches, unauthorized access to confidential data, or further exploitation of the system.

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations such as GDPR or HIPAA, as unauthorized access to sensitive data may violate confidentiality and security requirements.

Mitigation Strategies

Contact the vendor’s technical support for remediation as the vendor has already completed fixes and contacted affected users. Ensure system logs are not publicly accessible and review access controls.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97181. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart