Account Footprinting Vulnerability in Maksisoft Gym by Maksisoft Technology
CVE-2026-86778

5.3MEDIUM

Key Information:

Vendor

Maksisoft Technology, It, And Software Industry And Trade Inc.

Status
Maksisoft Gym
Vendor
CVE Published:
30 September 2026

What is CVE-2026-86778?

An observable response discrepancy vulnerability has been identified in Maksisoft Gym, developed by Maksisoft Technology. This security flaw enables attackers to perform account footprinting, potentially exposing sensitive user data. Affected versions include Maksisoft Gym prior to 0.5.11, which increases the risk of unauthorized access. Users are strongly advised to upgrade to the latest version to mitigate this vulnerability and protect their accounts from potential exploitation.

Affected Version(s)

Maksisoft Gym 0.5.10 < 0.5.11

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ă–zcan Ersan
.