CVE-2026-1019

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1019", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "state": "REJECTED", "assignerShortName": "twcert", "dateReserved": "2026-01-16T02:00:21.955Z", "datePublished": "2026-01-16T02:48:47.077Z", "dateUpdated": "2026-07-30T06:00:19.125Z", "dateRejected": "2026-07-30T06:00:19.125Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2026-07-30T06:00:19.125Z"}, "rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}]}], "x_generator": {"engine": "Vulnogram 1.0.4"}}}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1019", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "state": "REJECTED", "assignerShortName": "twcert", "dateReserved": "2026-01-16T02:00:21.955Z", "datePublished": "2026-01-16T02:48:47.077Z", "dateUpdated": "2026-07-30T06:00:19.125Z", "dateRejected": "2026-07-30T06:00:19.125Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2026-07-30T06:00:19.125Z"}, "rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}]}], "x_generator": {"engine": "Vulnogram 1.0.4"}}}}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}], "id": "CVE-2026-1019", "lastModified": "2026-10-16T14:10:00.120", "metrics": {}, "published": "2026-01-16T03:16:18.363", "references": [], "sourceIdentifier": "twcert@cert.org.tw", "vulnStatus": "Rejected"}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T16:06:14.095148+00:00", "value": {"mitigation_remediation": ["Upgrade the Police Statistics Database System to version\u202f1.0.3 or later to restore authentication checks and eliminate the flaw.", "Configure network segmentation or firewall rules to limit access to the database server only to trusted systems or privileged administrative hosts.", "Enable and configure database activity logging, then monitor logs for anomalous read, modify, or delete operations, and alert administrators to potential abuse promptly."], "summary": {"action": "Immediate Patch", "impact": "Unrestricted data modification and loss of integrity"}, "threat_synthesis": {"affected_systems": "The affected vendor is Gotac, product Police Statistics Database System. The advisory indicates that versions prior to 1.0.3 are vulnerable, and an upgrade to version 1.0.3 or later resolves the issue. No additional version details are provided beyond this update path.", "description_and_impact": "The Gotac Police Statistics Database System contains a missing authentication flaw that permits an attacker to read, modify, and delete database records without providing any credentials. The vulnerability is exercised via a specific application functionality and, once accessed, allows full compromise of confidentiality, integrity, and availability of the system\u2019s data. Consequently, sensitive law\u2011enforcement records could be exposed or corrupted, undermining public trust and operational efficiency.", "risk_and_exploitability": "With a CVSS score of 9.3 the flaw is considered very high severity, while the EPSS score of less than 1\u202f% suggests current exploitation activity is low. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote: any entity with network access to the system could exploit the missing authentication without credentials, making mitigation critical even if exploitation has not yet been observed."}}}}, "created": "2026-01-16T13:41:44.126862+00:00", "updated": "2026-04-18T16:15:04.598572+00:00", "vendors": ["gotac", "gotac$PRODUCT$statistical_database_system"]}