PT-2026-51318 · Gaudire · Assassin Game

Published 2026-06-22 · Updated 2026-06-22 · CVE-2026-7166

Mitre

CVSS v4.0

9.2

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Vulnerability involving the exposure of sensitive data provided without adequate protection. The API exposes email and phone number data from the ‘email’ and ‘telefon’ fields. This vulnerability is also present in the local database, as it contains accessible sensitive information such as data on minors and municipal users. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain access to sensitive information and data.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-7166

Affected Products

Assassin Game

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-7166 · Security Note
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-assassin-game-gaudire · Note