P5Verified

CVE-2026-105098: CoinEx Crypto 2025

CVE-2026-105098. CVSS 3.1 base score 4.3 (MEDIUM, Vendor/CNA). EPSS 0.00279 (percentile 0.1852), scored 05-Oct-2026.

Affected technology

CoinEx Crypto · 2025
Omega Solution

Component: Support Ticket API
Function: of
File: /ticket/customer

Attack conditions (VulDB, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could access information they should not be able to access. VulDB’s CVSS 4.0 assessment (base score 2.1/10) rates confidentiality impact as low; integrity and availability impact as none.

Published 11-Oct-2026 23:34 UTC

CWE: CWE-200, CWE-284
CCR priority: 17.3 /100 (P5)
CVSS 3.1: 4.3 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · Vendor/CNA
EPSS: 0.00279 · percentile 0.18799 · 2026-10-11
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-11 23:42:05.235979+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 07:06:46.985313+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-06 17:55:17.257073+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-105098.html