CVE-2026-14177 PUBLISHED

User Enumeration via Password Reset in IKAS Technology Inc.'s ikas E-Commerce Infrastructure

Assigner: TR-CERT
Reserved: 30.06.2026 Published: 16.10.2026 Updated: 16.10.2026

Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting.

This issue affects ikas E-Commerce Infrastructure: through 2026-07-13.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 7.5

Product Status

Vendor IKAS Technology Inc.
Product ikas E-Commerce Infrastructure
Versions Default: unaffected
  • affected from 0 to 2026-07-13 (incl.)

References

Problem Types

  • CWE-204 Observable response discrepancy CWE

Impacts

  • CAPEC-575 Account Footprinting