Which versions of Asp Net Core Inventory Order Management System are affected by CVE-2026-3262?

Organizations using go2ismail Asp.Net-Core-Inventory-Order-Management-System should be aware of moderate risk from CVE-2026-3262 rated CVSS 6.3.

Is there a public PoC exploit available for CVE-2026-3262?

Yes, a public proof-of-concept exploit is available for CVE-2026-3262. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-3262?

Within 30 days: Identify affected systems running go2ismail Asp.Net-Core-Inventory-Order-Management-System and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Asp Net Core Inventory Order Management System CVE-2026-3262

Q: What is the CVSS score of CVE-2026-3262?

CVE-2026-3262 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

LOW

Execution After Redirect (EAR) (CWE-698)

2026-02-26 cna@vuldb.com

Information Disclosure Asp Net Core Inventory Order Management System Go2Ismail

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.3 (MEDIUM) 2.1 (LOW)

Analysis Generated

Mar 12, 2026 - 21:56 vuln.today

PoC Detected

Mar 03, 2026 - 00:39 vuln.today

Public exploit code

CVE Published

Feb 26, 2026 - 22:20 nvd

MEDIUM 6.3

DescriptionCVE.org

A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Asp.Net-Core-Inventory-Order-Management-System versions up to 9.20250118. contains a security vulnerability (CVSS 6.3).

Technical ContextAI

affects Asp.Net-Core-Inventory-Order-Management-System. has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.