CVEvulnerability

CVE-2026-8142

6.5 MEDIUM Published 2026-05-07 Modified 2026-10-26 Official page ↗
Status
Awaiting Analysis
Published
2026-05-07
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creation or Ticket updates.

References