CVE-2026-9853: SYS600 vulnerability
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself.
Only the SYS600 system users should be permitted to view and modify application objects.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Any environment where a user can authenticate to the operating system of the server hosting SYS600 is exposed. Such a user may be able to read and modify SYS600 application objects without SYS600-specific authentication.
What access does an attacker need?
The attacker must be authenticated to the operating system on the server that hosts the SYS600 application. The description does not indicate that unauthenticated remote access alone is sufficient.
How can I determine whether this has already been exploited?
Review access to the hosting server for operating-system users who are not authorized SYS600 system users, and investigate whether they accessed or changed SYS600 application objects. The provided information does not identify specific logs, files, or indicators of compromise.