CVE-2026-97181: ezGlobal｜GPM LIGHT - Sensitive Data Exposure
Published Sep 24, 2026
·Updated
GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs.
Affected Software
1 affected component
ezGlobal GPM LIGHT
Event History
Sep 24, 2026
CVE Published
via MITRE·07:07 AM
Data Sourced
via MITRE·07:07 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Jul 29, 58700
Event
via NVD·11:32 AM
Frequently Asked Questions
1
Who can exploit this issue?
Any unauthenticated remote attacker who can reach the affected GPM LIGHT service may be able to access system logs. No credentials or user interaction are required.
2
What information could be exposed?
The disclosed data consists of system logs. The available information does not identify the specific log contents or whether they contain particular categories of sensitive data.
3
How can I determine whether my deployment is affected?
Check whether GPM LIGHT system logs can be accessed remotely without authentication. The provided information does not include affected versions, paths, or configuration details.