CVE-2026-88260

State: Published
Severity: 8.7 High
Published: Sep 11, 2026
Updated: Sep 11, 2026
Reserved: Sep 10, 2026

Description

Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion.

This issue affects Zenius EMS 8.0: through OAM (Build 109).

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	FSI

Weaknesses

CWE-288 Authentication bypass using an alternate path or channel
CWE-1286 Improper validation of syntactic correctness of input

Affected Products

Product	Versions
Zenius EMS 8.0Brainzcompany	OAM (Build 109) and earlierAffected

References

https://www.brainz.co.kr/Features

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.