CVE-2026-31151

CVE-2026-31151 is a critical authentication bypass vulnerability affecting Kaleris YMS version 7.2.2.1 that enables attackers to circumvent login verification controls and gain unauthorized access to application resources. The vulnerability carries a CVSS score of 9.8 CRITICAL with a network-based attack vector requiring no authentication or user interaction, indicating near-complete exploitability by remote attackers with minimal effort. The flaw poses severe impact across confidentiality, integrity, and availability, potentially allowing complete compromise of affected systems and data. Currently, there is no evidence of active exploitation in the wild, as the vulnerability does not appear on the KEV catalog or active threat lists, though the FAUCET risk score of 45.0/100 warrants prioritization. Organizations running Kaleris YMS v7.2.2.1 should apply patches immediately given the trivial attack complexity and the absence of any exploitation barriers.