High severity · published Oct 27, 2026
CVE-2026-100164
User Enumeration in Rolantis Information Technologies' Agentis
New
7.5
CVSS
–
EPSS
No
On KEV
Description
Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting.
This issue affects Agentis: before 4.8.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
Agentis · Rolantis Information Technologies Tourism Industry and Trade Co. Ltd.
before 4.8 · source: vendor
Affected product
AG
Agentis
Rolantis Information Technologies Tourism Industry and Trade Co. Ltd.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-100164
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-100164
siberguvenlik.gov.tr
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1406
More from Agentis
6.1
CVE-2026-87752
HTML Injection in Rolantis Information Technologies' Agentis