CVE-2026-35097
Weak Password Requirements in KTM System e-BOK
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jun 30, 2026
- Updated
- Jun 30, 2026
- Reserved
- Apr 1, 2026
Description
KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters.
This issue was fixed in the patch published in June 2026.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N | CERT-PL |
Weaknesses
- CWE-521 Weak Password Requirements
Affected Products
| Product | Versions |
|---|---|
e-BOKKTM System |
|
References
- https://cert.pl/posts/2026/06/CVE-2026-35095/third-party-advisory
- https://ktmsystem.pl/internetowe-biuro-obslugi-klienta/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.