Description (CNA)
The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information from the database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Appriss Insights / Victim Information Notification Exchange (VINE) | affected 0 before 2026-05-07; unaffected 2026-05-07 |
CWE
CWE-89
References
- https://www.cve.org/CVERecord?id=CVE-2026-63359
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-204-01.json
ADP enrichment
No English description supplied.
No references supplied.