CVE-2026-7382

Information Disclosure in MeWare Software's PDKS

CVSS 6.5 MEDIUMEPSS 0.3%CWE-200 CWE-359

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

30 Apr 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation. This issue affects PDKS: from V16.20200313 before VMYR_3.5.2025117.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

MeWare Software Development Inc. · PDKS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0141 https://www.usom.gov.tr/bildirim/tr-26-0141