Pending AI Enrichment

This vulnerability was recently detected via the live feed and has not yet been processed by Precogs AI's context enrichment engine. The data below represents raw telemetric data.

RAW NVD TELEMETRY

CVE-2026-19424

CVSS Base Score
7.5 HIGH
Primary Weakness
CWE-639
Published Date
Aug 11, 2026
Data Source
NVD API

Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to read other users' sensitive data.

Related Vulnerabilitiesvia CWE-639

CVE-2026-339316.5 MEDIUM

IDOR in OpenEMR Patient Portal payment page before 8.0.0.3. Authenticated patients can access other patients' payment and billing data (PHI) by manipulating the 'recid' parameter.

CWE-639
CVE-2026-339344.3 MEDIUM

IDOR in OpenEMR Patient Portal 'show-signature.php' before 8.0.0.3. Authenticated patients can retrieve staff member signature images by supplying arbitrary user values in the POST body.

CWE-639
CVE-2026-340558.1 HIGH

IDOR in OpenEMR library/pnotes.inc.php before 8.0.0.3. Legacy patient notes functions fail to verify ownership, allows users to access and manipulate notes of unauthorized patients.

CWE-639
CVE-2026-334250 UNKNOWN

Discourse is an open-source discussion platform.

CWE-203CWE-639CWE-862
CVE-2026-330538.8 HIGH

Langflow is a tool for building and deploying AI-powered agents and workflows.

CWE-639
CVE-2026-321140 UNKNOWN

Discourse is an open-source discussion platform.

CWE-639

Is your system affected?

Precogs AI detects CVE-2026-19424 in compiled binaries, LLMs, and application layers — even without source code access.