VulnSocial

CVE-2026-31150Disclosure(kaleris / yard_management_solutions)

LOWCVSS 4.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.

kaleris CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-284CWE-639

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • yard_management_solutions

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
kaleris
Products
yard_management_solutions

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-06: 2Technical Details · 2026-04-06: 204-06
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-31150 Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources. https://www.cve.org/CVERecord?id=CVE-2026-31150 ----- Traducción: CVE-2026-31150 Control de ac… http://infoflow.cloud`

    Post summary

    The tweet announces CVE‑2026‑31150, detailing a role‑based access‑control flaw in Kaleris YMS v7.2.2.1 that permits authenticated shipping/receiving users to view truck dashboard data, with no PoC, active exploitation, or patch information provided.

    0000031
    67 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-31150 Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources. https://www.cve.org/CVERecord?id=CVE-2026-31150

    Post summary

    The provided text announces CVE-2026-31150, detailing an access control flaw in Kaleris YMS that permits users with a shipping/receiving role to view restricted truck dashboard resources, with no PoC, exploit, or mitigation discussed.

    00000315
    57.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appkalerisyard_management_solutions7.2.2.1--

Explore more

Back to dashboardkaleris CVEsyard_management_solutions vulnerabilities