Vulnerability · Published Feb 27, 2026 · Assigned by jpcert
CVE-2026-27776
High 7.2
In plain English
A high-severity unsafe deserialization in intra-mart Accel Platform from NTT DATA INTRAMART Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 3.0)7.2High
Exploit odds (30 days)0.4%top 63.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue. This can be exploited only when IM-LogicDesigner is deployed on the system. Arbitrary code may be executed when some crafted file is imported by a user with the administrative privilege.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NTT DATA INTRAMART Corporation | intra-mart Accel Platform | 2017 Spring (8.0.4) through 2025 Autumn (8.0.27) |
Weakness: CWE-502 · Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H