CVE-2026-7189

Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. Co. Proliz's OBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Proliz's OBS: before v3.6.0.

• CWE-201

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0571

Published

Jul 17, 2026

Last Modified

Oct 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71884In Bouncy Castle for Java LTS before 2.73.13, the native one…8.2
• CVE-2026-71885In Bouncy Castle for Java before 1.86, the Messaging Layer S…9.2
• CVE-2026-71886In Bouncy Castle for Java before 1.86, the high-level OpenPG…8.2
• CVE-2026-71887In Bouncy Castle for Java before 1.86, the high-level OpenPG…8.2
• CVE-2026-71888In Bouncy Castle for Java before 1.86, the streaming CMS Aut…8.7
• CVE-2026-71889In Bouncy Castle for Java before 1.86, neither copy of PKIXC…8.7
• CVE-2026-71890In Bouncy Castle for Java before 1.86, validation of an MLS …8.7
• CVE-2026-71891In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.…7.1
• CVE-2026-71892In Bouncy Castle for Java before 1.86, the opt-in key-size v…6.9
• CVE-2026-71895An authorization vulnerability in Apache DolphinScheduler al…7.1
• CVE-2026-71896An authorization vulnerability in Apache DolphinScheduler al…6.5
• CVE-2026-71897An improper authorization check in Apache DolphinScheduler a…4.3