CVE-2026-100164

HighCVSS 7.5

Published: 27/10/2026(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Summary

An observable response discrepancy vulnerability in Agentis allows account footprinting. The issue affects versions before 4.8.

Risk Assessment

Account footprinting may allow an attacker to determine which accounts exist, facilitating further attacks. This may increase the risk of account takeover.

Recommendation

Update Agentis to version 4.8 or later. Normalize system responses so they do not reveal account existence.

Other vulnerabilities in Agentis

CVE-2026-87752Medium
A cross-site scripting (XSS) vulnerability in Agentis by Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. is caused by improper neutralization of input during web page generation. It allows XSS targeting HTML attributes.

Original NVD description (English source)

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting. This issue affects Agentis: before 4.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS