CVE-2026-1023

High · 7.5

CVSS

7.5

EPSS

0.5%

Published

Jan 16, 2026

CISA due date

—

The record

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents.

Affected packages

Ecosystem	Package	Introduced	Fixed