Authentication Bypass and Code Inclusion in Brainzcompany Zenius EMS
CVE-2026-88260

8.7HIGH

Key Information:

Vendor

Brainzcompany

Status
Zenius Ems 8.0
Vendor
CVE Published:
11 September 2026

What is CVE-2026-88260?

A vulnerability exists in Brainzcompany Zenius EMS 8.0 that allows for an authentication bypass via an alternate path or channel. This flaw, coupled with improper validation of input syntax, may lead to remote code inclusion, enabling attackers to execute arbitrary code on the affected system. Users of Zenius EMS 8.0 should take immediate steps to address this serious security issue to protect their systems.

Affected Version(s)

Zenius EMS 8.0 0

References

https://www.brainz.co.kr/Features

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

darbong(이민희)
.