CVE-2026-88467: CRMEB Knowledge-Paid System vulnerability
Published Sep 21, 2026
·Updated
CRMEB Knowledge-Paid System crmebzzffclass 1.4.4 has a backend verification function that returns the wrong type of value, causing errors and leaking sensitive information.
Affected Software
1 affected component
CRMEB Knowledge-Paid System=1.4.4
Event History
Sep 21, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:17 PM
Description
Frequently Asked Questions
1
What access does an attacker need to trigger the information leak?
The available data does not specify the required access level, request path, or other preconditions for reaching the affected backend verification function.
2
What information can be exposed by the error?
The issue is described as leaking sensitive information, but the available data does not identify the specific data types, error output, or affected logs.
3
Is there a workaround if patching is not immediately possible?
No workaround or mitigation is provided in the available data. Restricting access to backend functionality may reduce exposure, but the data does not confirm a specific effective configuration change.