IKAS Technology Inc. vulnerabilities

Products

• E-Commerce 1
• ikas E-Commerce Infrastructure 1
• Rush 1

Latest IKAS Technology Inc. CVEs

Newest publication first

1. CVE-2026-14177 User Enumeration via Password Reset in IKAS Technology Inc.'s ikas E-Commerce Infrastructure

   Published 2026-10-16

   High·CVSS 7.5 EPSS 0.25%

   Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting. This issue affects ikas E-Commerce Infrastructure: through 2026-07-13.

2. CVE-2026-19441 Unauthenticated API Allows Analytics Data Manipulation in IKAS Technology's Rush

   Published 2026-08-21

   Medium·CVSS 5.3 EPSS 0.36%

   Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data. This issue affects Rush: through 21082026. NOTE: The vendor was contacted and it was learned that the product is not supported.

3. CVE-2026-7488 Sensitive Data Exposure in IKAS Technologies' E-Commerce

   Published 2026-07-17

   High·CVSS 7.5 EPSS 0.42%

   Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.