CVE-2026-100164 PUBLISHED

User Enumeration in Rolantis Information Technologies' Agentis

Assigner: TR-CERT
Reserved: 25.09.2026 Published: 27.10.2026 Updated: 27.10.2026

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting.

This issue affects Agentis: before 4.8.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 7.5

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	Rolantis Information Technologies Tourism Industry and Trade Co. Ltd.
Product	Agentis
Versions	Default: unaffected affected from 0 to 4.8 (excl.)

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1406

Problem Types

CWE-204 Observable response discrepancy CWE

Impacts

CAPEC-575 Account Footprinting