CVE-2026-19441 — Unauthenticated API Allows Analytics Data Manipulation in IKAS Technology's Rush

CVE-2026-19441

Unauthenticated API Allows Analytics Data Manipulation in IKAS Technology's Rush PUBLISHED

Description (CNA)

Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data. This issue affects Rush: through 21082026. NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected (CNA)

Vendor / product	Versions
IKAS Technology Inc. / Rush	affected 0 through 21082026

CWE

CWE-306

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0883

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.