CVE-2026-6280Disclosure

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Nomysem: through 08072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-213

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-07-08); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-08: 2Mentions · 2026-07-18: 1Technical Details · 2026-07-08: 207-0807-18
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-082
Disclosure2
2026-07-181
General1
Full discourse3 posts
  • Fatih Aktürk@thefatihakturk
    General

    Bir akademisyen olarak CVE kazanmanın gururunu yaşıyorum. https://www.cve.org/CVERecord?id=CVE-2026-6280 https://t.co/kiK7HBizmg

    Post summary

    The tweet merely announces the author's pride in obtaining a CVE, with only a link to the CVE record and no additional technical or exploit information.

    1002061
    12 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-6280 Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionalit… https://www.cve.org/CVERecord?id=CVE-2026-6280 ----- Traducción: CVE-2026-6280 Exp… http://infoflow.cloud`

    Post summary

    The snippet announces CVE-2026-6280, describing it as a sensitive‑information‑exposure issue caused by incompatible policies in Nomysem, but offers no PoC, exploit code, or patch details.

    0000028
    91 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-6280 Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionalit… https://www.cve.org/CVERecord?id=CVE-2026-6280

    Post summary

    A new CVE‑2026‑6280 about data exposure in NOMYSOFT's Nomysem is announced, but no exploit or patch details are disclosed.

    00000675
    57.8K followersView on X

Explore more