CVE-2026-7187

—

CVSS 3.1

8.8 high

EPSS

<1%p12

Published

Jul 28, 2026 (Jul 28, 2026)

Modified

Aug 4, 2026

Description

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported.

Weakness: CWE-306
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.