CVE-2026-86450: Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal
Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects DetaWix Mobile Web Portal: before v1.0.19.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
DetaWix Mobile Web Portal versions before 1.0.19 are affected. The provided information does not identify any other affected products or versions.
What access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation can be performed over the network with low attack complexity, without privileges or user interaction. Successful exploitation may expose sensitive information.
Does this appear to affect a default or internet-facing deployment?
The network attack vector indicates the vulnerable functionality can be reached over a network, but the provided data does not state whether it is enabled by default or whether affected portals are typically internet-facing.