CVE-2026-6280 — Improper Access Control in Nomysoft Informatics' Nomysem

CVE-2026-6280

Improper Access Control in Nomysoft Informatics' Nomysem PUBLISHED

Description (CNA)

Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Nomysem: through 08072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
NOMYSOFT Informatics Education and Consulting Inc. / Nomysem	affected 0 through 08072026

CWE

CWE-213

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0516

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.