HIGHCVSS 8.2

CVE-2026-63315

CVE-2026-63315 updated by NVD

Published: 2026-10-15
Modified: 2026-10-18
Sources: euvd, nvd

Summary

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-63315

Includes data from the ENISA EU Vulnerability Database (EUVD).

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.