CVE-2026-101146 | Eleveo Quality Management 9.7.0 GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure

September 28, 2026 Yanac

A vulnerability classified as problematic has been found in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure.

This vulnerability is reported as CVE-2026-101146. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More