CVE-2026-14177: User Enumeration via Password Reset in IKAS Technology Inc.'s ikas E-Commerce Infrastructure
Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting.
This issue affects ikas E-Commerce Infrastructure: through 2026-07-13.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is remotely exploitable with no privileges or user interaction required. An unauthenticated attacker can use observable response differences to determine whether accounts exist.
What security impact does successful exploitation have?
The reported impact is account footprinting or user enumeration. The provided severity vector rates confidentiality impact as high, while integrity and availability impacts are listed as none.
Which deployments are identified as affected?
IKAS Technology ikas E-Commerce Infrastructure is identified as affected through 2026-07-13. The supplied information does not specify fixed versions, affected configuration details, or mitigations.