{"id":"CVE-2026-88467","title":"CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of value, causing errors and leaking sensitive information.","summary":"CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of value, causing errors and leaking sensitive information.","severity":"medium","cvss":6.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-209"],"published":"2026-09-21","updated":"2026-10-01","sourceUpdated":"2026-10-01T17:17:32.593","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-88467","references":[{"url":"https://github.com/crmeb/crmeb_zzff_class","label":"cve@mitre.org"},{"url":"https://github.com/crmeb/crmeb_zzff_class/issues","label":"cve@mitre.org"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-01T16:24:40.458351Z"},"epss":0.0012,"epssPercentile":0.01855,"ingestedAt":"2026-09-21T20:52:58.299Z","slug":"CVE-2026-88467","body":"## Overview\n\nCRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of value, causing errors and leaking sensitive information.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":34.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":214556,"id":"CVE-2026-88467","ts":1790881060125,"field":"cvss","old":null,"new":"6.2"},{"seq":214555,"id":"CVE-2026-88467","ts":1790881060125,"field":"severity","old":"none","new":"medium"}]}