CVE-2026-1019

Critical · 9.8

CVSS

9.8

EPSS

0.5%

Published

Jan 16, 2026

CISA due date

—

The record

Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality.

Affected packages

Ecosystem	Package	Introduced	Fixed