Dashboard / CVE-2026-114574

CVE-2026-114574

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 61/100
Published: 2026-10-21 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Passive
AT: None
VC: Low
VI: None
VA: None

Description

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The name of the patch is d25d8fa3f5a1e34285c8634f18729650c0c05cda. It is advisable to implement a patch to correct this issue.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
massCodeIO massCode 5.10

References & Advisories (8)

Bug Bounty Relevance

61 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

5.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

EPSS — Exploitation Probability

0.31%
Raw Score 0.003090
Percentile 23.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00309
2026-10-28
0.00309

Intelligence Sources

mitre ref →
nvd ref →

External Links