CVE-2026-6280
Improper Access Control in Nomysoft Informatics' Nomysem
- State
- Published
- Severity
- 6.5 Medium
- Published
- Jul 8, 2026
- Updated
- Jul 8, 2026
- Reserved
- Apr 14, 2026
Description
Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Nomysem: through 08072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | TR-CERT |
Weaknesses
- CWE-213 Exposure of sensitive information due to incompatible policies
Affected Products
| Product | Versions |
|---|---|
NomysemNOMYSOFT Informatics Education and Consulting Inc. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0516government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.