CVE-2026-10711

—

CVSS 3.1

8.8 high

EPSS

<1%p30

Published

Jun 23, 2026 (Jun 23, 2026)

Modified

Jun 23, 2026

Description

Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CafePlus: from 12.05.03 before 12.05.04.

Weakness: CWE-306
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.