What is the CVSS score of CVE-2026-19441?

CVE-2026-19441 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.3%.

Rush CVE-2026-19441

EUVD-2026-63828 MEDIUM

Missing Authentication for Critical Function (CWE-306)

2026-08-21 iletisim@usom.gov.tr

GHSA-88qr-rwq3-229p

Authentication Bypass

5.3

CVSS 3.1 · Vendor: usom

Severity by source

Vendor (usom) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

vuln.today AI

5.3 MEDIUM

Network-reachable with no auth or interaction required; impact is integrity-only (data source spoofing), no confidentiality or availability loss.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (usom).

CVSS VectorVendor: usom

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 21, 2026 - 08:30 vuln.today

DescriptionCVE.org

Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data.

This issue affects Rush: through 21082026.

AnalysisAI

Missing authentication for a critical function in IKAS Technology Inc. Rush (versions through 21082026) permits unauthenticated remote attackers to forge the apparent source of data submitted to the system. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	No special conditions are required beyond network reachability to the Rush application - the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms remote unauthenticated exploitation against the default configuration of Rush. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) scores 5.3 Medium and signals a remotely reachable, low-complexity attack requiring no privileges or user interaction, but with impact capped at low integrity - confidentiality and availability are unaffected. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No specific patched version is identified in the available data. … Detailed patch versions, workarounds, and compensating controls in full report.