CVE-2026-1365

—

CVSS 3.1

6.5 medium

EPSS

<1%p39

Published

Jul 9, 2026 (Jul 9, 2026)

Modified

Jul 9, 2026

Description

Insertion of sensitive information into sent data vulnerability in Sayax Energy Technologies Inc. OSOS allows Authentication Bypass. This issue affects OSOS: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Weakness: CWE-201
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.