CVE-2026-5756

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Apr 14, 2026

CISA due date

—

The record

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS) allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services.

Affected packages

Ecosystem	Package	Introduced	Fixed