CVE-2026-64940Patch

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from the management console.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-625

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-29: 1Patch / Workaround · 2026-07-29: 1Technical Details · 2026-07-29: 107-29
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • yousukezan@yousukezan
    Patch

    てがろぐに不正ログインの欠陥 CVE-2026-64940、旧版すべてが対象で4.9.0へ https://kkm-mako.com/blog/articles/tegalog-cve/

    Post summary

    The notice identifies CVE-2026-64940, a flaw that permits unauthorized login in all older Tegalog releases, and recommends upgrading to version 4.9.0 for a fix.

    0001031.8K
    15.0K followersView on X

Explore more