{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/wolvox-control-panel-26.02.25/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:akinsoft:wolvox_control_panel:26.02.25:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-92555"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=850771F0-0236-5ADC-9D9D-4539F7390F8A\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["WOLVOX Control Panel (26.02.25)"],"_cs_severities":["critical"],"_cs_tags":["vulnerability","information-disclosure"],"_cs_type":"advisory","_cs_vendors":["AKIN Software"],"content_html":"\u003cp\u003eCVE-2026-92555 is a high-severity information disclosure vulnerability identified in the AKINSOFT WOLVOX Control Panel, specifically within the 'Pull Data from System Resources' functionality. This flaw occurs when the application fails to properly secure data retrieved from internal system resources, resulting in sensitive information being included in outgoing data transmissions. An attacker capable of triggering this function can intercept or access sensitive system details that should remain protected. This vulnerability affects WOLVOX Control Panel versions starting from 26.02.25 and is resolved in version 26.02.26. Given the sensitive nature of the information processed by control panels of this type, successful exploitation risks significant data exposure of internal system configurations and operational parameters.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability poses a severe risk to organizational confidentiality by allowing unauthorized access to internal system resources. If successfully exploited, attackers can exfiltrate sensitive data transmitted by the application, potentially leading to further reconnaissance or compromise of the environment where WOLVOX is deployed.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpdate the AKINSOFT WOLVOX Control Panel to version 26.02.26 or later immediately to patch CVE-2026-92555. Organizations should restrict network access to the control panel interface to trusted management networks only to minimize the risk of unauthorized data requests.\u003c/p\u003e\n","date_modified":"2026-10-08T19:25:18Z","date_published":"2026-10-08T12:55:15Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-92555/","summary":"CVE-2026-92555 allows for the unauthorized extraction of sensitive information via the 'Pull Data from System Resources' function in AKINSOFT WOLVOX Control Panel versions 26.02.25.","title":"Information Disclosure Vulnerability in AKINSOFT WOLVOX Control Panel","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-92555/"}],"language":"en","title":"CraftedSignal Threat Feed - WOLVOX Control Panel (26.02.25)","version":"https://jsonfeed.org/version/1.1"}