EUVD-2026-22679
GHSA-qrm3-xjrv-8v85
7.5
CVSS 3.1 · Vendor: cert
Share
Severity by source
Vendor (cert)
PRIMARY
7.5
HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary rating from Vendor (cert) · only source for this CVE.
CVSS VectorVendor: cert
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Lifecycle Timeline
4
Analysis Generated
Jul 26, 2026 - 15:44 vuln.today
CVSS changed
Apr 16, 2026 - 13:22 NVD
7.5 (HIGH)
EUVD ID Assigned
Apr 14, 2026 - 18:22 euvd
EUVD-2026-22679
CVE Published
Apr 14, 2026 - 18:17 nvd
HIGH 7.5
DescriptionCVE.org
Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS) allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services.
AnalysisAI
Unauthenticated configuration file modification in DRC Central Office Services allows remote attackers to alter server settings, potentially enabling mass data exfiltration, malicious traffic interception, or disruption of testing services. No active exploitation or public exploit code is known, with EPSS estimating a 0.03% probability of exploitation in the next 30 days.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).