Verified

CVE-2026-63315: IPx 0 to before 6.62.0100

Affected technology

IPx · 0 to before 6.62.0100
Slican

Component: WebCTI

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An attacker with access to the database can obtain the user's password and log in to the subscriber's account. Vendor/CNA’s CVSS 4.0 assessment (base score 8.2/10) rates confidentiality impact as high; integrity and availability impact as none.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-256
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-63315.html