CVE-2026-6280
Medium · 6.5CVSS
6.5
EPSS
—
Published
Jul 8, 2026
CISA due date
—
The record
Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Nomysem: through 08072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-55425 Graylog is a free and open log management platform. CWE-213
- CVE-2026-56538 An endpoint in HCL Connections is vulnerable to information disclosure. CWE-213
- CVE-2026-33216 NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging… CWE-213
- CVE-2025-52603 HCL Connections is vulnerable to information disclosure. CWE-213