Vulnerability · Published Aug 12, 2026 · Assigned by twcert
CVE-2026-19426FitSoft｜POS Sytstem - Missing Authentication
High 8.2
In plain English
A high-severity missing authentication in POS System from FitSoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.5%top 55.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FitSoft | POS System | all |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
References
- https://www.twcert.org.tw/tw/cp-132-11100-407c5-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-11101-4f85c-2.html third-party-advisory