CVE-2026-15575

MediumCVSS 5.3

Published: 16/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 16/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows exploitation of non-production interfaces. This issue affects Costifier through 2026-10-16. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Assessment

An attacker could exploit active debug interfaces to gain unauthorized access or perform unwanted operations. The vendor's lack of response increases the risk of no patches being available.

Recommendation

Consider disabling or restricting access to debug interfaces in Costifier. Monitor vendor communications and apply mitigations if needed.

Other vulnerabilities in Costifier

CVE-2026-15219Medium
Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows exploitation of trusted identifiers. This issue affects Costifier through 2026-10-16. The vendor was contacted early about this disclosure but did not respond in any way.

Original NVD description (English source)

Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS