CVE-2026-109849
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user.
| Vendor | ntt data intellilink corporation |
| Product | hinemos |
| Published | Nov 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for ntt data intellilink corporation hinemos
Be the first to know when new medium vulnerabilities affecting ntt data intellilink corporation hinemos are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affected Versions
NTT DATA INTELLILINK Corporation / Hinemos
7.2.0 7.1.0 ≤ 7.1.2 7.0.0 ≤ 7.0.4 6.2.0 ≤ 6.2.2 6.1.0 ≤ 6.1.2 6.0.0 ≤ 6.0.3