CVE-2026-1023 Gotac｜Statistics Database System - Missing Authentication
Unauthenticated remote attackers can query database contents due to missing authentication in Gotac Statistics Database System.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-1023?
CVE-2026-1023 is a high-severity missing authorization vulnerability in Gotac Statistics Database System, published on 16 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents.
Weakness: CWE-306
Which versions are affected by CVE-2026-1023?
It affects 1 product.
Products include Gotac Statistics Database System.
How do I fix CVE-2026-1023?
No fix has been published for CVE-2026-1023 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-1023 being exploited?
There is no known exploitation of CVE-2026-1023 in the wild and no public exploit code.
Other vulnerabilities in Gotac Statistics Database System
Sources
Also known as GHSA-p8vm-372w-hvgf.