CVE-2026-1020

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1020", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "state": "REJECTED", "assignerShortName": "twcert", "dateReserved": "2026-01-16T02:00:23.125Z", "datePublished": "2026-01-16T02:57:08.356Z", "dateUpdated": "2026-07-30T06:00:57.253Z", "dateRejected": "2026-07-30T06:00:57.253Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2026-07-30T06:00:57.253Z"}, "rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}]}], "x_generator": {"engine": "Vulnogram 1.0.4"}}}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1020", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "state": "REJECTED", "assignerShortName": "twcert", "dateReserved": "2026-01-16T02:00:23.125Z", "datePublished": "2026-01-16T02:57:08.356Z", "dateUpdated": "2026-07-30T06:00:57.253Z", "dateRejected": "2026-07-30T06:00:57.253Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2026-07-30T06:00:57.253Z"}, "rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}]}], "x_generator": {"engine": "Vulnogram 1.0.4"}}}}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}], "id": "CVE-2026-1020", "lastModified": "2026-10-16T14:10:00.120", "metrics": {}, "published": "2026-01-16T03:16:18.590", "references": [], "sourceIdentifier": "twcert@cert.org.tw", "vulnStatus": "Rejected"}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T05:51:31.203981+00:00", "value": {"mitigation_remediation": ["Update the Police Statistics Database System to version 1.0.3 or newer.", "Disable external file access that could allow path traversal by tightening configuration.", "Monitor application logs for anomalous file access patterns."], "summary": {"action": "Immediate Patch", "impact": "Information Disclosure"}, "threat_synthesis": {"affected_systems": "Gotac Police Statistics Database System. Versions prior to 1.0.3 are affected; the fix is available in version 1.0.3 and later.", "description_and_impact": "The vulnerability is an Absolute Path Traversal flaw in the Police Statistics Database System from Gotac. It permits unauthenticated remote attackers to retrieve arbitrary system paths, exposing sensitive file structure information. This can lead to further exploitation of other weaknesses and compromise confidentiality.", "risk_and_exploitability": "The CVSS base score is 6.9 indicating a medium severity. EPSS is <1%, suggesting low likelihood of exploitation at present. The vulnerability is not listed in KEV, so no known active exploitation. Attackers can exploit it remotely without authentication by supplying a file path that resolves outside the intended directory."}}}}, "created": "2026-01-16T13:41:46.786523+00:00", "updated": "2026-04-18T06:00:08.491631+00:00", "vendors": ["gotac", "gotac$PRODUCT$statistical_database_system"]}