Dashboard / CVE-2026-33566

CVE-2026-33566

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 60/100
Published: 2026-04-27 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Active
S: X
AT: None
VC: None
VI: Low
VA: None

Description

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
jpcert logontracer < 2.0.0

References & Advisories (2)

https://jvn.jp/en/jp/JVN57877356/
Third Party Advisory

Bug Bounty Relevance

60 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

5.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.18%
Raw Score 0.001770
Percentile 7.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00177
2026-10-28
0.00177

Intelligence Sources

nvd ref →

External Links