What’s Vulnerable › Vulnerabilities

CVE-2026-5756: Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS)

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-14 · updated 2026-07-24

Description

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services (COS) allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services.

Affected products

• Data Recognition Corporation Central Office Services - Content Hosting Component: 975

References

• https://www.datarecognitioncorp.com/
• https://www.kb.cert.org/vuls/id/748485

Get alerted when CVE-2026-5756 or the next vulnerability affects your stack