What is the CVSS score of EUVD-2026-71214?

EUVD-2026-71214 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Which versions of GastroMenum Web Panel are affected by EUVD-2026-71214?

GastroMenum Web Panel versions through August 31, 2026 contain an account enumeration vulnerability that allows unauthenticated attackers to systematically identify valid user accounts via…. A patch is available.

How to fix or mitigate EUVD-2026-71214?

Within 24 hours, inventory all GastroMenum Web Panel instances across your environment and identify exposed user populations (staff, customers, administrators). Immediately enable authentication logging and establish baseline metrics for failed login attempts. Within 7 days, implement rate limiting (e.g., 5 failed attempts per 15 minutes per source IP triggers temporary lockout) and account lockout policies on authentication endpoints; deploy Web Application Firewall rules to throttle brute-force patterns; configure alerts for enumeration-like activity (high volume of authentication failures for different usernames from single source). Contact the vendor to confirm patch timeline and commit to immediate deployment once available. Within 30 days, launch phishing awareness training for staff (credential stuffing attacks are often preceded by social engineering), enforce multi-factor authentication on administrative accounts, and establish strong password requirements-this is a critical priority requiring immediate patch application once released by the vendor.

GastroMenum Web Panel EUVD-2026-71214

| CVE-2026-19205 HIGH

Observable Response Discrepancy (CWE-204)

2026-09-04 TR-CERT

GHSA-6xfp-3hvw-2q77

Information Disclosure Gastromenum Web Panel

7.5

CVSS 3.1 · Vendor: TR-CERT

Severity by source

Vendor (TR-CERT) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

5.3 MEDIUM

Account footprinting discloses account existence only, not credentials or sensitive data, warranting C:L not C:H.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (TR-CERT).

CVSS VectorVendor: TR-CERT

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Sep 04, 2026 - 16:02 EUVD

Analysis Generated

Sep 04, 2026 - 14:46 vuln.today

CVE Published

Sep 04, 2026 - 14:08 cve.org

HIGH 7.5

DescriptionCVE.org

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting.

This issue affects GastroMenum Web Panel: before 31.08.2026.

AnalysisAI

Observable response discrepancy in GastroMenum Web Panel exposes account existence to unauthenticated remote attackers via differential server responses, enabling systematic account footprinting. All versions prior to 31.08.2026 of the web panel are affected. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	No special conditions - remote unauthenticated exploitation against default configurations of GastroMenum Web Panel. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The vendor-assigned CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) is likely overstated for the confidentiality impact metric. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Update GastroMenum Web Panel to the version released on or after 31.08.2026, per the TR-CERT advisory at https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1013. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all GastroMenum Web Panel instances across your environment and identify exposed user populations (staff, customers, administrators). …

Threat intelligence, references, and detailed analysis are available after sign-in.