PT-2026-40765 · Unknown · Trust Protection Foundation

Published 2026-05-13 · Updated 2026-05-13 · CVE-2026-0240

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Trust Protection Foundation (affected versions not specified)

Description An information disclosure issue in Trust Protection Foundation allows an authenticated attacker to obtain sensitive information from the server's vault. This can lead to the attacker impersonating any user within the environment and arbitrarily modifying configuration settings. Additionally, the flaw may allow a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2026-07185

CVE-2026-0240

Affected Products

Trust Protection Foundation

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-0240 · Security Note
• https://bdu.fstec.ru/vul/2026-07185 · Security Note
• https://security.paloaltonetworks.com/CVE-2026-0240 · Vendor Advisory