{"id":"CVE-2026-10764","published":"2026-09-30T10:17:16.960","lastModified":"2026-09-30T17:32:07.107","description":"Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data.","cvssScore":8.7,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cwes":["CWE-321"],"vendors":[],"products":[],"references":[{"url":"https://www.iqsight.com/f/292130204896374/x/594fff1c4a/iqsight-sa-261342.pdf","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw allows man-in-the-middle attackers to gain unauthorized access to sensitive data in BVMS versions 4.5 to 12.3, posing a significant security risk.","exploitability":"Exploitation requires network access and the ability to intercept communications, making it moderately difficult.","blast_radius":"If exploited, the impact could be severe, as it allows unauthorized access to sensitive data, potentially leading to data breaches or loss of confidentiality.","remediation":"Upgrade to BVMS version 12.4 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["info-disc","network","mitm"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-03T08:55:15.182Z"}}