Is CVE-2026-6280 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-6280?

CVE-2026-6280 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-6280

Description

Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Nomysem: through 08072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.