CVE-2026-31150

CVE-2026-31150 is an access control vulnerability affecting Kaleris YMS version 7.2.2.1 that permits authenticated users with shipping and receiving role permissions to improperly access truck dashboard resources beyond their intended authorization scope. The vulnerability carries a CVSS score of 4.3 (Medium severity) with a network-based attack vector requiring low complexity and valid user credentials, resulting in limited confidentiality impact with no integrity or availability concerns. Exploitation requires prior authentication and does not appear to be actively leveraged in the wild, as evidenced by its absence from the CISA Known Exploited Vulnerabilities catalog and inactive status on security hot lists, though the EPSS score of 0.00028 indicates minimal probability of exploitation based on threat intelligence data. The moderate FAUCET Risk Score of 30.0 suggests this should be addressed through normal patch management procedures rather than emergency protocols. Organizations running affected Kaleris YMS instances should prioritize applying available patches to enforce proper role-based access controls and restrict dashboard visibility to appropriately authorized personnel.