CVE-2026-1365 PUBLISHED

Information Disclosure in Sayax's OSOS

Assigner: TR-CERT
Reserved: 23.01.2026 Published: 09.07.2026 Updated: 09.07.2026

Insertion of sensitive information into sent data vulnerability in Sayax Energy Technologies Inc. OSOS allows Authentication Bypass.

This issue affects OSOS: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 6.5

Product Status

Vendor Sayax Energy Technologies Inc.
Product OSOS
Versions Default: unknown
  • affected from 0 to 09072026 (incl.)

Credits

  • İremnur YILMAZ finder

References

Problem Types

  • CWE-201 Insertion of sensitive information into sent data CWE

Impacts

  • CAPEC-115 Authentication Bypass