CVE-2026-35097

Weak Password Requirements in KTM System e-BOK

CVSS 6.9 MEDIUMEPSS 0.2%CWE-521

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.9EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

30 jun 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters. This issue was fixed in the patch published in June 2026.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Produtos afetados

KTM System · e-BOK

Referências

https://cert.pl/posts/2026/06/CVE-2026-35095/https://ktmsystem.pl/internetowe-biuro-obslugi-klienta/