Information Disclosure Vulnerability in AKINSOFT WOLVOX Control Panel

CVE-2026-92555 is a high-severity information disclosure vulnerability identified in the AKINSOFT WOLVOX Control Panel, specifically within the 'Pull Data from System Resources' functionality. This flaw occurs when the application fails to properly secure data retrieved from internal system resources, resulting in sensitive information being included in outgoing data transmissions. An attacker capable of triggering this function can intercept or access sensitive system details that should remain protected. This vulnerability affects WOLVOX Control Panel versions starting from 26.02.25 and is resolved in version 26.02.26. Given the sensitive nature of the information processed by control panels of this type, successful exploitation risks significant data exposure of internal system configurations and operational parameters.

Impact

The vulnerability poses a severe risk to organizational confidentiality by allowing unauthorized access to internal system resources. If successfully exploited, attackers can exfiltrate sensitive data transmitted by the application, potentially leading to further reconnaissance or compromise of the environment where WOLVOX is deployed.

Recommendation

Update the AKINSOFT WOLVOX Control Panel to version 26.02.26 or later immediately to patch CVE-2026-92555. Organizations should restrict network access to the control panel interface to trusted management networks only to minimize the risk of unauthorized data requests.