Back to the CVE list

CVE-2026-38056

ST Engineering iDirect iQ-Series Terminals Missing Authorization

CVSS score

8.8

EPSS probability

%0.2

Risk score

0.0

Published

1 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

8.7

CVE-2026-38059ST Engineering iDirect iQ-Series Terminals Missing authentication for critical function

VendorST Engineering iDirect ProductEvolution iQ‑Series terminals+2 etkilenen

Patch status unknownEPSS %13 mo ago

8.1

CVE-2026-38058ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere

VendorST Engineering iDirect ProductEvolution iQ‑Series terminals+2 etkilenen

Patch status unknownEPSS %01 mo ago

5.3

CVE-2026-94216ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting

VendorST Engineering iDirect ProductiDX+1 etkilenen

Patch status unknownEPSS %028 d ago

5.3

CVE-2026-94214ST Engineering iDirect iDX/Evo iDX Location Header redirect

VendorST Engineering iDirect ProductiDX+1 etkilenen

Patch status unknownEPSS %028 d ago

7.0

CVE-2026-38057ST Engineering iDirect iQ-Series Terminals Cross-Site request forgery

VendorST Engineering iDirect ProductEvolution iQ‑Series terminals+2 etkilenen

Patch status unknownEPSS %03 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-38056"