PT-2026-53887 · Ktm System · E-Bok

Jacek Korta · Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-35097

NVD

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters.

This issue was fixed in the patch published in June 2026.

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2026-35097

Affected Products

E-Bok

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-35097 · Security Note
• https://cert.pl/posts/2026/06/CVE-2026-35095 · Note
• https://ktmsystem.pl/internetowe-biuro-obslugi-klienta · Note